diff --git a/ostree/sysctl.conf b/ostree/sysctl.conf
index c310434..bebb59d 100644
--- a/ostree/sysctl.conf
+++ b/ostree/sysctl.conf
@@ -1,3 +1,11 @@
 # This is free and unencumbered software released into the public domain.
 
+fs.protected_fifos = 2
+
+fs.protected_regular = 2
+
+fs.suid_dumpable = 0
+
+net.ipv4.conf.all.log_martians = 1
+
 net.ipv4.ip_unprivileged_port_start = 23