citadel/meta-citadel-distro/recipes-core/base-files/files/99-grsec-debootstrap.conf
brl 4966a01f76 add sysctl to disable some grsec features
features that would prevent debootstrap from working on the host
2018-01-22 22:04:36 -05:00

10 lines
284 B
Plaintext

# disable some pax and grsecurity features so that debootstrap will work
# this should be removed later
kernel.grsecurity.chroot_caps = 0
kernel.grsecurity.chroot_deny_chmod = 0
kernel.grsecurity.chroot_deny_mknod = 0
kernel.grsecurity.chroot_deny_mount = 0
kernel.pax.softmode = 1