# Do not accept source routing
net.ipv4.conf.default.accept_source_route = 0
+# Promote secondary addresses when the primary address is removed
+net.ipv4.conf.default.promote_secondaries = 1
+
# Enable hard and soft link protection
fs.protected_hardlinks = 1
fs.protected_symlinks = 1