Lines Matching refs:yes
22 LockPersonality=yes
23 MemoryDenyWriteExecute=yes
24 NoNewPrivileges=yes
25 PrivateDevices=yes
26 PrivateNetwork=yes
27 PrivateTmp=yes
29 ProtectControlGroups=yes
30 ProtectHome=yes
31 ProtectHostname=yes
32 ProtectKernelLogs=yes
33 ProtectKernelModules=yes
34 ProtectKernelTunables=yes
41 RestrictNamespaces=yes
42 RestrictRealtime=yes
43 RestrictSUIDSGID=yes