fs.protected_hardlinks = 1
fs.protected_symlinks = 1
kernel.dmesg_restrict = 0
kernel.sysrq = 1
net.ipv4.tcp_fin_timeout = 15
net.ipv4.tcp_keepalive_intvl = 15
net.ipv4.tcp_keepalive_probes = 3
net.ipv4.tcp_syncookies = 1
net.ipv4.tcp_tw_reuse = 1