Linux kernel security tunables everyone should consider adopting

https://blog.cloudflare.com/linux-kernel-hardening/