Initial commit.

base-files/sysctl.d/kernel.conf

@@ -0,0 +1,15 @@
+# Append the PID to a 'core' dump's filename.
+kernel.core_uses_pid = 1
+
+# The contents of /proc/<pid>/{maps,smaps} should only visible to processes
+# that are allowed to ptrace() the process.
+kernel.maps_protect = 1
+
+# Reboot after 10 seconds when the kernel panics.
+kernel.panic = 10
+
+# Allow more PIDs (2^17).
+kernel.pid_max = 131072
+
+# Disable 'magic' SysRq functionallity.
+kernel.sysrq = 0