From 6343b37e9f3a473a81f6ecb0a0303bc9cd1b23ad Mon Sep 17 00:00:00 2001 From: Denis Chevalier Date: Thu, 6 Aug 2026 12:34:57 +0200 Subject: prevent core dumps --- etc/sysctl.d/99-security.conf | 3 +++ 1 file changed, 3 insertions(+) (limited to 'etc/sysctl.d') diff --git a/etc/sysctl.d/99-security.conf b/etc/sysctl.d/99-security.conf index a476e40..d2b9b1b 100644 --- a/etc/sysctl.d/99-security.conf +++ b/etc/sysctl.d/99-security.conf @@ -29,3 +29,6 @@ net.ipv6.conf.all.accept_redirects = 0 net.ipv6.conf.default.accept_redirects = 0 net.ipv4.conf.all.send_redirects = 0 net.ipv4.conf.default.send_redirects = 0 + +# Prevent setuid binaries or privileged processes from dumping core +fs.suid_dumpable = 0 -- cgit