Lines Matching refs:yes
22 LockPersonality=yes
23 MemoryDenyWriteExecute=yes
25 NoNewPrivileges=yes
27 PrivateDevices=yes
28 PrivateNetwork=yes
29 PrivateTmp=yes
30 ProtectControlGroups=yes
31 ProtectHome=yes
32 ProtectHostname=yes
33 ProtectKernelModules=yes
34 ProtectKernelTunables=yes
35 ProtectKernelLogs=yes
38 RestrictRealtime=yes
39 RestrictSUIDSGID=yes