sysctl.conf-diff

rber@yocto-vm-1:/work/rber/poky-bernard-5.0-build-bb$ diff /work/rber/poky-bernard-5.0-build-bb/tmp/work/beagleboard-poky-linux-gnueabi/poky-image-lsb-sdk-1.0-r0/rootfs/etc/sysctl.conf /work/rber/poky-bernard-5.0-build-bb/tmp/work/beagleboard-poky-linux-gnueabi/poky-image-lsb-sdk-1.0-r0/rootfs/etc/sysctl.conf-opkg
0a1
> # This configuration file is taken from Debian.
2c3,4
< # Configuration file for setting system variables in /proc
---
> # /etc/sysctl.conf - Configuration file for setting system variables
> # See sysctl.conf (5) for information.
6d7
< #net/ipv4/icmp_echo_ignore_broadcasts=1
8c9
< # the following stops low-level messages on console
---
> # Uncomment the following to stop low-level messages on console
11,14d11
< # enable /proc/$pid/maps privacy so that memory relocations are not
< # visible to other users.
< #kernel.maps_protect = 1
<
19,20c16,20
< # Uncomment the next line to enable Spoof protection (reverse-path filter)
< #net.ipv4.conf.default.rp_filter=1
---
> # Uncomment the next two lines to enable Spoof protection (reverse-path filter)
> # Turn on Source Address Verification in all interfaces to
> # prevent some spoofing attacks
> net.ipv4.conf.default.rp_filter=1
> net.ipv4.conf.all.rp_filter=1
26c26
< #net.ipv4.conf.default.forwarding=1
---
> #net.ipv4.ip_forward=1
29c29,64
< #net.ipv6.conf.default.forwarding=1
---
> #net.ipv6.conf.all.forwarding=1
>
>
> ###################################################################
> # Additional settings - these settings can improve the network
> # security of the host and prevent against some network attacks
> # including spoofing attacks and man in the middle attacks through
> # redirection. Some network environments, however, require that these
> # settings are disabled so review and enable them as needed.
> #
> # Ignore ICMP broadcasts
> #net.ipv4.icmp_echo_ignore_broadcasts = 1
> #
> # Ignore bogus ICMP errors
> #net.ipv4.icmp_ignore_bogus_error_responses = 1
> #
> # Do not accept ICMP redirects (prevent MITM attacks)
> #net.ipv4.conf.all.accept_redirects = 0
> #net.ipv6.conf.all.accept_redirects = 0
> # _or_
> # Accept ICMP redirects only for gateways listed in our default
> # gateway list (enabled by default)
> # net.ipv4.conf.all.secure_redirects = 1
> #
> # Do not send ICMP redirects (we are not a router)
> #net.ipv4.conf.all.send_redirects = 0
> #
> # Do not accept IP source route packets (we are not a router)
> #net.ipv4.conf.all.accept_source_route = 0
> #net.ipv6.conf.all.accept_source_route = 0
> #
> # Log Martian Packets
> #net.ipv4.conf.all.log_martians = 1
> #
>
> #kernel.shmmax = 141762560