Initial commit

sysctl.d/98-rpi.conf

@@ -0,0 +1,2 @@
+kernel.printk = 3 4 1 3
+vm.min_free_kbytes = 16384

sysctl.d/99-sysctl.conf

@@ -0,0 +1 @@
+../sysctl.conf

sysctl.d/README.sysctl

@@ -0,0 +1,13 @@
+Kernel system variables configuration files
+
+Files found under the /etc/sysctl.d directory that end with .conf are
+parsed within sysctl(8) at boot time.  If you want to set kernel variables
+you can either edit /etc/sysctl.conf or make a new file.
+
+The filename isn't important, but don't make it a package name as it may clash
+with something the package builder needs later. It must end with .conf though.
+
+My personal preference would be for local system settings to go into
+/etc/sysctl.d/local.conf but as long as you follow the rules for the names
+of the file, anything will work. See sysctl.conf(8) man page for details
+of the format.

sysctl.d/protect-links.conf

@@ -0,0 +1,8 @@
+###################################################################
+# Protected links
+#
+# Protects against creating or following links under certain conditions
+# Debian kernels have both set to 1 (restricted) 
+# See https://www.kernel.org/doc/Documentation/sysctl/fs.txt
+fs.protected_hardlinks = 1
+fs.protected_symlinks = 1