xoxys.kernel/tasks/coredump.yml
Robert Kaussow 626c156b74
All checks were successful
continuous-integration/drone/push Build is passing
feat: add option to add custom sysctl configs (#2)
2023-01-29 15:31:08 +01:00

37 lines
899 B
YAML

---
- block:
- name: Disable core dump for setuid programs
template:
src: etc/sysctl.d/99-dump.conf.j2
dest: /etc/sysctl.d/99-dump.conf
owner: root
group: root
mode: 0644
notify: __kernel_reload
- name: Disable core dump for all users
template:
src: etc/security/limits.d/dump.conf.j2
dest: /etc/security/limits.d/dump.conf
owner: root
group: root
mode: 0644
- name: Disable core dump via soft limits
template:
src: etc/profile.d/dump.sh.j2
dest: /etc/profile.d/dump.sh
owner: root
group: root
mode: 0644
- name: Disable core dump via systemd
template:
src: etc/systemd/coredump.conf.j2
dest: /etc/systemd/coredump.conf
owner: root
group: root
mode: 0644
become: True
become_user: root