diff options
| author | Evgeny Vereshchagin <evvers@ya.ru> | 2019-07-25 21:58:42 +0000 |
|---|---|---|
| committer | Frantisek Sumsal <frantisek@sumsal.cz> | 2019-07-26 06:56:58 +0000 |
| commit | be74f51605b4c7cb74fec3a50cd13b67598a8ac1 (patch) | |
| tree | 7b8e99fd63c841b4c3035538455c6924c8fafb1d /sysctl.d | |
| parent | 0a71e31c33021d4265fcc037c93d8f364521f281 (diff) | |
| download | systemd-be74f51605b4c7cb74fec3a50cd13b67598a8ac1.tar.gz | |
Revert "sysctl: Enable ping(8) inside rootless Podman containers"
This reverts commit 90ce7627dfe824ff6e7c0ca5f96350fbcfec7118.
See https://github.com/systemd/systemd/issues/13177#issuecomment-514931461
Diffstat (limited to 'sysctl.d')
| -rw-r--r-- | sysctl.d/50-default.conf | 8 |
1 files changed, 0 insertions, 8 deletions
diff --git a/sysctl.d/50-default.conf b/sysctl.d/50-default.conf index f0b4f610f8..27084f6242 100644 --- a/sysctl.d/50-default.conf +++ b/sysctl.d/50-default.conf @@ -30,14 +30,6 @@ net.ipv4.conf.all.accept_source_route = 0 # Promote secondary addresses when the primary address is removed net.ipv4.conf.all.promote_secondaries = 1 -# ping(8) without CAP_NET_ADMIN and CAP_NET_RAW -# The upper limit is set to 2^31-1. Values greater than that get rejected by -# the kernel because of this definition in linux/include/net/ping.h: -# #define GID_T_MAX (((gid_t)~0U) >> 1) -# That's not so bad because values between 2^31 and 2^32-1 are reserved on -# systemd-based systems anyway: https://systemd.io/UIDS-GIDS.html#summary -net.ipv4.ping_group_range = 0 2147483647 - # Fair Queue CoDel packet scheduler to fight bufferbloat net.core.default_qdisc = fq_codel |