Add support to managing extra kernel flags

dev-sec / puppet-os-hardening

This puppet module provides numerous security-related configurations, providing all-round base protection.

http://dev-sec.io/

Apache License 2.0

279 stars 101 forks source link

Open lthiagol opened 1 year ago

lthiagol commented 1 year ago

Added support to managing extra kernel flags, specifically vm.swappiness, vm.overcommit_memory and transparent_hugepage.

vm.swappiness and vm.overcommit_memory are supported by sysctl, so, the changes went into sysctl module
transparent_hugepage isn't supported by sysctl, so, I created a module to handle kernel flags like this.