### Rozhuk Ivan 2009.06 - 2020
### sysctl.conf.local
### 12.x


# SECURITY
security.bsd.map_at_zero=1		# Permit processes to map an object at virtual address 0.
security.bsd.unprivileged_mlock=1	# Allow non-root users to call mlock(2)
security.bsd.unprivileged_proc_debug=1	# disable debug for unprivileged users
security.bsd.unprivileged_read_msgbuf=1	# Unprivileged processes may read the kernel message buffer

vfs.usermount=1				# disable mount for unprivileged users

kern.elf32.nxstack=1			# enable non-executable stack

net.inet.tcp.blackhole=0		# Do not send RST on segments to closed ports


# SHARED MEMORY
kern.ipc.shmall=4294967296		# Maximum number of pages available for shared memory
kern.ipc.shmmax=4294967296		# Maximum shared memory segment size
kern.ipc.shm_allow_removed=1		# Enable/Disable attachment to attached segments marked for removal
kern.ipc.shm_use_phys=1			# Enable/Disable locking of shared memory pages in core, making them unswappable# Useful for databases
kern.ipc.semmsl=1024			# Max semaphores per id


# VFS-FUSE
vfs.fusefs.data_cache_mode=1		# Zero: disable caching of FUSE file data; One: write-through caching (default); Two: write-back caching (generally unsafe).
vfs.fusefs.iov_permanent_bufsize=2097152 # limit for permanently stored buffer size for fuse_iovs.


# SOUND
dev.hdaa.0.init_clear=0			# 0 to accept the default configuration values setup by the BIOS.
dev.hdaa.1.init_clear=0
dev.hdaa.2.init_clear=0
dev.hdaa.3.init_clear=0
dev.hdaa.4.init_clear=0
dev.hdaa.5.init_clear=0
dev.hdaa.6.init_clear=0
dev.hdaa.7.init_clear=0
hw.snd.maxautovchans=256		# maximum virtual channels
#hw.snd.default_unit=4			# Default soundcard
hw.snd.feeder_rate_quality=4		# sample rate converter quality (0=low .. 4=high)
#hw.snd.timeout=1			# interrupt timeout (1 - 10) seconds
#hw.snd.latency_profile=0		# buffering latency profile (0=aggressive 1=safe)
#hw.snd.latency=0			# buffering latency (0=low ... 10=high)
hw.snd.report_soft_matrix=0		# report software-emulated channel matrixing
hw.snd.report_soft_formats=0		# report software-emulated formats


# EVDEV
kern.evdev.rcpt_mask=12			# Who is receiving events: bit0 - sysmouse, bit1 - kbdmux, bit2 - mouse hardware, bit3 - keyboard hardware


# SCHEDULER
kern.sched.balance=0			# Enables the long-term load balancer
kern.sched.balance_interval=1000	# Average period in stathz ticks to run the long-term balancer
kern.sched.affinity=10000		# Number of hz ticks to keep thread affinity for