Lines Matching refs:yes
30 LockPersonality=yes
31 MemoryDenyWriteExecute=yes
32 NoNewPrivileges=yes
33 PrivateDevices=yes
34 PrivateTmp=yes
36 ProtectControlGroups=yes
37 ProtectHome=yes
38 ProtectHostname=yes
39 ProtectKernelLogs=yes
40 ProtectKernelModules=yes
41 ProtectKernelTunables=yes
46 RestrictNamespaces=yes
47 RestrictRealtime=yes
48 RestrictSUIDSGID=yes