Lines Matching refs:yes
28 LockPersonality=yes
29 MemoryDenyWriteExecute=yes
30 NoNewPrivileges=yes
31 PrivateDevices=yes
32 PrivateTmp=yes
34 ProtectClock=yes
35 ProtectControlGroups=yes
36 ProtectHome=yes
37 ProtectKernelLogs=yes
38 ProtectKernelModules=yes
39 ProtectKernelTunables=yes
44 RestrictNamespaces=yes
45 RestrictRealtime=yes
46 RestrictSUIDSGID=yes
48 RuntimeDirectoryPreserve=yes