Lines Matching refs:yes
16 DynamicUser=yes
18 LockPersonality=yes
19 MemoryDenyWriteExecute=yes
20 PrivateDevices=yes
21 PrivateNetwork=yes
23 ProtectControlGroups=yes
24 ProtectHome=yes
25 ProtectHostname=yes
26 ProtectKernelLogs=yes
27 ProtectKernelModules=yes
28 ProtectKernelTunables=yes
30 RestrictNamespaces=yes
31 RestrictRealtime=yes