name=bpf-hardened

[sysctl]
net.core.bpf_jit_harden = 2
kernel.unprivileged_bpf_disabled = 2
