kernel.core_pattern=%e-%h-%p.core
-kernel.maps_protect=1
kernel.printk=4 4 1 7
kernel.sysrq=1
net.ipv4.conf.all.accept_redirects=0
net.ipv4.conf.eth0.send_redirects=0
net.ipv4.icmp_echo_ignore_broadcasts=1
net.ipv4.icmp_ignore_bogus_error_responses=1
-net.ipv4.tcp_congestion_control=cubic
net.ipv4.tcp_ecn=0
net.ipv4.tcp_max_syn_backlog=2048
net.ipv4.tcp_mtu_probing=1
net.ipv4.tcp_retries1=2
net.ipv4.tcp_rfc1337=1
+net.ipv4.tcp_synack_retries=2
net.ipv4.tcp_syncookies=1
vm.min_free_kbytes=10240
vm.mmap_min_addr=65536
* lintian fixevi
* Grub2 kompatibilnost
* migracija sa udevsettle na udevadm settle
+ * reload sysctl varijabli kroz init procps skriptu
-- Dinko Korunic <kreator@carnet.hr> Thu, 28 Apr 2011 09:41:53 +0200
# old kernel params (skipping some of the obsolete or overrided entries)
if [ -e /etc/sysctl.conf ]; then
- egrep -v 'net\.core\.(r|w)mem_max|net\.ipv4\.tcp_(r|w)mem|vm\.bdflush|net\.ipv4\.ip_local_port_range|kernel\.rtsig-max|net\.ipv4\.tcp_syncookies|kernel\.exec-shield|net\.ipv4\.tcp_max_syn_backlog|net\.ipv4\.tcp_congestion_control|kernel\.exec-shield' \
+ egrep -v 'net\.core\.(r|w)mem_max|net\.ipv4\.tcp_(r|w)mem|vm\.bdflush|net\.ipv4\.ip_local_port_range|kernel\.rtsig-max|net\.ipv4\.tcp_syncookies|kernel\.exec-shield|net\.ipv4\.tcp_max_syn_backlog|net\.ipv4\.tcp_congestion_control|kernel\.exec-shield|kernel\.maps_protect' \
/etc/sysctl.conf >> /etc/sysctl.conf.$$
fi
cp_mv /etc/sysctl.conf.$$ /etc/sysctl.conf
echo -n " sysctl.conf"
+# reload sysctl ASAP
+if [ -x "`which invoke-rc.d 2>/dev/null`" ]; then
+ invoke-rc.d procps restart >/dev/null 2>&1 || true
+else
+ /etc/init.d/procps restart >/dev/null 2>&1 || true
+fi
+
# finished with basic kernel-2.6-cn stuff
echo "."