fs.inotify.max_user_instances = 1024
fs.inotify.max_user_watches = 16384
fs.protected_hardlinks = 1
fs.protected_symlinks = 1

kernel.dmesg_restrict = 0
kernel.sysrq = 1
kernel.unprivileged_userns_clone = 1

net.ipv4.tcp_fin_timeout = 15
net.ipv4.tcp_keepalive_intvl = 15
net.ipv4.tcp_keepalive_probes = 3
net.ipv4.tcp_syncookies = 1
net.ipv4.tcp_tw_reuse = 1

# vim: set ft=cfg: