anchor.diff:  #           other interfaces, with the hope we will receive reply for our
   #           request and even sometimes no matter the source IP address we
   #           announce.
  -net.ipv4.conf.eth0.arp_ignore = <%= ((@node['network']['arp']['restricted']) ? "1" : "0") %>
  +net.ipv4.conf.eth0.arp_ignore = <%= ((@node['network']['arp']['restricted']) ? 1 : 0) %>
   
   
   # Define different modes for sending replies in response to received ARP requests that resolve local target IP addresses:
  
positive.code: # * **64**  - signalling of processes (term, kill, oom-kill)
  # * **128** - reboot/poweroff
  # * **256** - nicing of all RT tasks
  kernel.sysrq = <%= ((@node['security']['kernel']['enable_sysrq']) ? "#{@node['security']['kernel']['secure_sysrq']}" : "0" ) %>
  
  # Prevent core dumps with SUID. These are usually only needed by developers and
  # may contain sensitive information.
  fs.suid_dumpable = <%= ((@node['security']['kernel']['enable_core_dump']) ? "1" : "0") %>
  
negative.code: 
  # This settings controls how the kernel behaves towards module changes at
  # runtime. Setting to 1 will disable module loading at runtime.
  kernel.modules_disabled = <%= ((@node['security']['kernel']['enable_module_loading']) ? 0 : 1) %>
  
  # Magic Sysrq should be disabled, but can also be set to a safe value if so
  # desired for physical machines. It can allow a safe reboot if the system hangs
  