Lines Matching refs:yes
17 LockPersonality=yes
19 MemoryDenyWriteExecute=yes
20 NoNewPrivileges=yes
21 PrivateDevices=yes
22 PrivateNetwork=yes
23 PrivateTmp=yes
25 ProtectClock=yes
26 ProtectControlGroups=yes
27 ProtectHome=yes
28 ProtectHostname=yes
29 ProtectKernelLogs=yes
30 ProtectKernelModules=yes
31 ProtectKernelTunables=yes
34 RestrictNamespaces=yes
35 RestrictRealtime=yes
36 RestrictSUIDSGID=yes