Skip to content

Commit

Permalink
Merge pull request #401 from felix-seifert/felix-seifert/fix-grammar
Browse files Browse the repository at this point in the history
Increase readability through fixing minor mistakes
  • Loading branch information
ashie committed Apr 4, 2022
2 parents 8ec581b + 0a25a0e commit 7e448af
Showing 1 changed file with 3 additions and 3 deletions.
6 changes: 3 additions & 3 deletions installation/before-install.md
Original file line number Diff line number Diff line change
Expand Up @@ -61,16 +61,16 @@ These kernel options were originally taken from the presentation [How Netflix Tu

Fluentd sometimes uses predictable paths for dumping, writing files, and so on. This default settings for the protections are in `/etc/sysctl.d/10-link-restrictions.conf`, or `/usr/lib/sysctl.d/50-default.conf` or elsewhere.

For symlink attack protection, check the following parameters are set up as `1`:
For symlink attack protection, check the following parameters are set to `1`:

```text
fs.protected_hardlinks = 1
fs.protected_symlinks = 1
```

This settings are almost enough for time-of-check to time-of-use (TOCTOU, TOCTTOU or TOC/TOU) which are class of software bugs.
This settings are almost enough for time-of-check to time-of-use (TOCTOU, TOCTTOU or TOC/TOU) which are a class of software bugs.

If you turned off these protections, please turn on them.
If you turned off these protections, please turn them on.

Use `sysctl -p` command or reboot your node for the changes to take effect.

Expand Down

0 comments on commit 7e448af

Please sign in to comment.