···

       
25
       
25
       
 
       
    "nohibernate"

     

       
26
       
26
       
 
       
  ];

     

       
27
       
27
       
 
       


     

       
28
       
28
       
+
       
  boot.blacklistedKernelModules = [

     

       
29
       
29
       
+
       
    # Obscure network protocols

     

       
30
       
30
       
+
       
    "ax25"

     

       
31
       
31
       
+
       
    "netrom"

     

       
32
       
32
       
+
       
    "rose"

     

       
33
       
33
       
+
       
  ];

     

       
34
       
34
       
+
       


     

       
28
       
35
       
 
       
  # Restrict ptrace() usage to processes with a pre-defined relationship

     

       
29
       
36
       
 
       
  # (e.g., parent/child)

     

       
30
       
37
       
 
       
  boot.kernel.sysctl."kernel.yama.ptrace_scope" = mkOverride 500 1;