about summary refs log tree commit diff stats
path: root/core/sysctl.html
diff options
context:
space:
mode:
authorSilvino <silvino@bk.ru>2019-06-28 03:58:25 +0100
committerSilvino <silvino@bk.ru>2019-06-28 03:58:25 +0100
commitbb4fd340e7a1faffc363c6baa2f67e84b3a34f0c (patch)
treeb8e4bed0ede5b48bf26b920949e83e36c1fe431c /core/sysctl.html
parent296be79a3b724db67a37244a67cfb3e4ef6b652f (diff)
parentfe94262de38aafc839963ced9b82ee45d81b65f5 (diff)
downloaddoc-bb4fd340e7a1faffc363c6baa2f67e84b3a34f0c.tar.gz
doc release 0.5.4
Diffstat (limited to 'core/sysctl.html')
-rw-r--r--core/sysctl.html3
1 files changed, 3 insertions, 0 deletions
diff --git a/core/sysctl.html b/core/sysctl.html
index afee463..550ae6d 100644
--- a/core/sysctl.html
+++ b/core/sysctl.html
@@ -62,6 +62,9 @@
         net.core.netdev_max_backlog = 5000
         net.ipv4.tcp_window_scaling = 1
 
+        #A sequence of SACKs may be crafted such that one can trigger an integer overflow, leading to a kernel panic.
+        net.ipv4.tcp_sack = 0
+
         # Both ports linux-blob and linux-libre don't build with ipv6
         # Disable ipv6
         net.ipv6.conf.all.disable_ipv6 = 1