net.ipv4.tcp_rfc1337 not a valid sysctl key

[dannyrohde]

Hello,

I seem to be running into an issue as sysctl can't find a key for net.ipv4.tcp_rfc1337. I get a sysctl error message when trying to run os_hardening.

I am running Ubuntu 17.04 in LXC containers ( 4.13.0-36-generic #40~16.04.1-Ubuntu SMP Fri Feb 16 23:25:58 UTC 2018 x86_64 x86_64 x86_64 GNU/Linux). Couldn't find anything online about the key not existing anymore in newer kernels.

Any pointer how to correct the above would be appreciated.

Thanks,
Danny

[mcgege]

Hi Danny,

this is most likely caused by your environment (LXC containers) ... I only know docker containers, and in these environments I cannot access / change all kernel settings. We are aware of these restrictions and our plan is to select the hardening actions based on the environment in the near future.

Greetings

Michael

[dannyrohde]

Thanks Michael. Makes sense. Will adjust the code myself for this one and keep an eye open for future updates.