summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--float/roles/float-base/templates/sysctl.conf.j21
1 files changed, 1 insertions, 0 deletions
diff --git a/float/roles/float-base/templates/sysctl.conf.j2 b/float/roles/float-base/templates/sysctl.conf.j2
index ac7fed2..c28c31e 100644
--- a/float/roles/float-base/templates/sysctl.conf.j2
+++ b/float/roles/float-base/templates/sysctl.conf.j2
@@ -114,6 +114,7 @@ kernel.sysrq=0
# (linux-hardened default)
net.core.bpf_jit_harden=2
kernel.unprivileged_bpf_disabled=1
+{% endif %}
{% if not disable_restricted_sysctl %}
# Disable unprivileged user namespaces