Lines Matching refs:yes
22 LockPersonality=yes
23 MemoryDenyWriteExecute=yes
24 NoNewPrivileges=yes
25 PrivateDevices=yes
26 PrivateNetwork=yes
27 PrivateTmp=yes
29 ProtectControlGroups=yes
30 ProtectHome=yes
31 ProtectKernelLogs=yes
32 ProtectKernelModules=yes
33 ProtectKernelTunables=yes
37 RestrictNamespaces=yes
38 RestrictRealtime=yes
39 RestrictSUIDSGID=yes