sysctl.conf

kernel.panic=10
kernel.randomize_va_space=2
kernel.sysrq = 0
kernel.core_uses_pid = 1
kernel.exec-shield = 1
kernel.randomize_va_space = 1
kernel.dmesg_restrict = 1
kernel.kptr_restrict = 1

net.ipv4.icmp_ignore_bogus_error_responses=1

net.ipv4.tcp_rfc1337 = 1

net.ipv4.conf.all.accept_redirects = 0
net.ipv4.conf.all.secure_redirects = 0
net.ipv4.conf.all.log_martians = 1
net.ipv4.conf.all.rp_filter = 1

net.ipv4.ip_forward = 0
net.ipv4.icmp_echo_ignore_broadcasts = 1
net.ipv4.icmp_ignore_bogus_error_messages = 1
net.ipv4.icmp_ignore_bogus_error_responses = 1

net.ipv4.tcp_synkoockies = 1
net.ipv4.tcp_synack_retries = 5

fs.suid_dumpable = 0

fs.protected_hadlinks = 1
fs.protected_symlinks = 1
fs.protected_hardlinks = 1
fs.protected_symlinks = 1