Improve the node hardening by enabling the yama security module of the kernel and configuring it

Summary

The nodes are currently created without enabling the yama security module. It must be done in order to restrict the ptrace syscall, and the sysctl parameter kernel.yama.ptrace_scope must be set to 2.

related references

Details

Assignee Loading
Time tracking Loading