dev-sec / puppet-os-hardening

This puppet module provides numerous security-related configurations, providing all-round base protection.
http://dev-sec.io/
Apache License 2.0
279 stars 101 forks source link

enable_core_dump parameter is boolean, should allow at least 3 values #307

Open iscb1962 opened 1 year ago

iscb1962 commented 1 year ago

The enable_core_dump parameter is a boolean which translates false to 0 and true to 1, before setting the kernel parameter fs.suid_dumpable to the resultant value. This kernel setting actually has three options;

0 – disabled 1 – enabled 2 – enabled with restrictions (I believe the dump file is only accessible to root).

The parameter type needs to be change to integer so that the value can be set (or an additional parameter added to allow the on value to be set to 1 or 2).

OS / Environment RHEL / CentOS / Rocky 7 and 9

Puppet Version

7.25.0