From mboxrd@z Thu Jan 1 00:00:00 1970 From: Peter =?utf-8?q?M=C3=BCller?= To: development@lists.ipfire.org Subject: [PATCH] sysctl.conf: include PID in file names of generated core dumps Date: Tue, 03 Nov 2020 16:14:17 +0100 Message-ID: MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============3799281643554846509==" List-Id: --===============3799281643554846509== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit This is recommended by various Linux hardening guides in order to prevent accidential overwriting of existing core dumps. While it has probably little to no relevance to the average IPFire user, enabling it won't harm and fixes a Lynis warning. :-) Signed-off-by: Peter Müller --- config/etc/sysctl.conf | 3 +++ 1 file changed, 3 insertions(+) diff --git a/config/etc/sysctl.conf b/config/etc/sysctl.conf index be7c07c85..c9b4c092a 100644 --- a/config/etc/sysctl.conf +++ b/config/etc/sysctl.conf @@ -103,3 +103,6 @@ net.ipv4.tcp_fastopen = 3 # This protects against various TCP attacks, such as DoS against or injection # of arbitrary segments into prematurely closed connections. net.ipv4.tcp_rfc1337 = 1 + +# Include PID in file names of generated core dumps +kernel.core_uses_pid = 1 -- 2.26.2 --===============3799281643554846509==--