From: Peter Müller Date: Tue, 3 Nov 2020 15:14:17 +0000 (+0100) Subject: sysctl.conf: include PID in file names of generated core dumps X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=b474e87bb8a4199fb20e88d5a98593817ecd3f3f;p=people%2Fms%2Fipfire-2.x.git sysctl.conf: include PID in file names of generated core dumps This is recommended by various Linux hardening guides in order to prevent accidential overwriting of existing core dumps. While it has probably little to no relevance to the average IPFire user, enabling it won't harm and fixes a Lynis warning. :-) Signed-off-by: Peter Müller Signed-off-by: Michael Tremer --- diff --git a/config/etc/sysctl.conf b/config/etc/sysctl.conf index be7c07c857..c9b4c092af 100644 --- a/config/etc/sysctl.conf +++ b/config/etc/sysctl.conf @@ -103,3 +103,6 @@ net.ipv4.tcp_fastopen = 3 # This protects against various TCP attacks, such as DoS against or injection # of arbitrary segments into prematurely closed connections. net.ipv4.tcp_rfc1337 = 1 + +# Include PID in file names of generated core dumps +kernel.core_uses_pid = 1