2019-11-03 23:22:18 +00:00
|
|
|
---
|
2024-02-18 12:46:52 +00:00
|
|
|
- name: Disable core dump for setuid programs
|
|
|
|
ansible.builtin.template:
|
|
|
|
src: etc/sysctl.d/99-dump.conf.j2
|
|
|
|
dest: /etc/sysctl.d/99-dump.conf
|
|
|
|
owner: root
|
|
|
|
group: root
|
|
|
|
mode: "0644"
|
|
|
|
notify: __kernel_reload
|
2019-11-03 23:22:18 +00:00
|
|
|
|
2024-02-18 12:46:52 +00:00
|
|
|
- name: Disable core dump for all users
|
|
|
|
ansible.builtin.template:
|
|
|
|
src: etc/security/limits.d/dump.conf.j2
|
|
|
|
dest: /etc/security/limits.d/dump.conf
|
|
|
|
owner: root
|
|
|
|
group: root
|
|
|
|
mode: "0644"
|
2019-11-03 23:22:18 +00:00
|
|
|
|
2024-02-18 12:46:52 +00:00
|
|
|
- name: Disable core dump via soft limits
|
|
|
|
ansible.builtin.template:
|
|
|
|
src: etc/profile.d/dump.sh.j2
|
|
|
|
dest: /etc/profile.d/dump.sh
|
|
|
|
owner: root
|
|
|
|
group: root
|
|
|
|
mode: "0644"
|
2022-09-19 14:24:05 +00:00
|
|
|
|
2024-02-18 12:46:52 +00:00
|
|
|
- name: Disable core dump via systemd
|
|
|
|
ansible.builtin.template:
|
|
|
|
src: etc/systemd/coredump.conf.j2
|
|
|
|
dest: /etc/systemd/coredump.conf
|
|
|
|
owner: root
|
|
|
|
group: root
|
|
|
|
mode: "0644"
|