diff options
| author | Denis Chevalier <perso@denischevalier.fr> | 2026-08-06 12:34:57 +0200 |
|---|---|---|
| committer | Denis Chevalier <perso@denischevalier.fr> | 2026-08-06 12:35:04 +0200 |
| commit | 6343b37e9f3a473a81f6ecb0a0303bc9cd1b23ad (patch) | |
| tree | 98e89692d00b9e9b27f693ddbb5d3a236ba01150 /etc/sysctl.d | |
| parent | a35e6f911fa032bb61a0e327465f3dcdf357d8e6 (diff) | |
| download | postinstall-6343b37e9f3a473a81f6ecb0a0303bc9cd1b23ad.tar.gz postinstall-6343b37e9f3a473a81f6ecb0a0303bc9cd1b23ad.tar.bz2 postinstall-6343b37e9f3a473a81f6ecb0a0303bc9cd1b23ad.zip | |
prevent core dumps
Diffstat (limited to 'etc/sysctl.d')
| -rw-r--r-- | etc/sysctl.d/99-security.conf | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/etc/sysctl.d/99-security.conf b/etc/sysctl.d/99-security.conf index a476e40..d2b9b1b 100644 --- a/etc/sysctl.d/99-security.conf +++ b/etc/sysctl.d/99-security.conf @@ -29,3 +29,6 @@ net.ipv6.conf.all.accept_redirects = 0 net.ipv6.conf.default.accept_redirects = 0 net.ipv4.conf.all.send_redirects = 0 net.ipv4.conf.default.send_redirects = 0 + +# Prevent setuid binaries or privileged processes from dumping core +fs.suid_dumpable = 0 |