diff --git a/roles/basesecurity/templates/sysctl.d/local.conf.j2 b/roles/basesecurity/templates/sysctl.d/local.conf.j2 index 86ef034..663a4e9 100644 --- a/roles/basesecurity/templates/sysctl.d/local.conf.j2 +++ b/roles/basesecurity/templates/sysctl.d/local.conf.j2 @@ -11,7 +11,3 @@ kernel.kptr_restrict = 1 # Restrict dmesg access # This can leak specific harware failures to exploit kernel.dmesg_restrict = 1 - -# Do not load kernel modules after boot -# Some modules have security issues and are used in exploits -kernel.modules_disabled = 1