From 7950191a534b24e25ab6b61d463d26c5f9a3d089 Mon Sep 17 00:00:00 2001 From: Alexandre Iooss Date: Mon, 25 Mar 2019 10:55:51 +0100 Subject: [PATCH] Fix PVE unable to mount vfat at boot --- roles/basesecurity/templates/sysctl.d/local.conf.j2 | 4 ---- 1 file changed, 4 deletions(-) diff --git a/roles/basesecurity/templates/sysctl.d/local.conf.j2 b/roles/basesecurity/templates/sysctl.d/local.conf.j2 index 86ef034..663a4e9 100644 --- a/roles/basesecurity/templates/sysctl.d/local.conf.j2 +++ b/roles/basesecurity/templates/sysctl.d/local.conf.j2 @@ -11,7 +11,3 @@ kernel.kptr_restrict = 1 # Restrict dmesg access # This can leak specific harware failures to exploit kernel.dmesg_restrict = 1 - -# Do not load kernel modules after boot -# Some modules have security issues and are used in exploits -kernel.modules_disabled = 1