aboutsummaryrefslogtreecommitdiffstats
path: root/puppet
diff options
context:
space:
mode:
authorJenkins <jenkins@review.openstack.org>2017-04-05 14:23:49 +0000
committerGerrit Code Review <review@openstack.org>2017-04-05 14:23:49 +0000
commit963d4a6954ea6b5c25706b082748550d3f647140 (patch)
tree976c0fd4821b8171771e99615d875f6d58031c15 /puppet
parent29faa38ddca3a91d6944bdda8daceda4dde2b128 (diff)
parent4483378fec94ab3af9ad12e66bc6bc8697a673c6 (diff)
Merge "Disable core dump for setuid programs"
Diffstat (limited to 'puppet')
-rw-r--r--puppet/services/kernel.yaml2
1 files changed, 2 insertions, 0 deletions
diff --git a/puppet/services/kernel.yaml b/puppet/services/kernel.yaml
index ee4c771f..bc4380a5 100644
--- a/puppet/services/kernel.yaml
+++ b/puppet/services/kernel.yaml
@@ -58,5 +58,7 @@ outputs:
value: {get_param: KernelPidMax}
kernel.dmesg_restrict:
value: 1
+ fs.suid_dumpable:
+ value: 0
step_config: |
include ::tripleo::profile::base::kernel