back to labs
CIS: Restrict Core Dumps
EasyLinux Security15 minThe brief
Core dumps can spill secrets (keys, passwords) from process memory to disk. Per the CIS Benchmark, restrict them: forbid core dumps in /etc/security/limits.conf, disable setuid core dumps via sysctl (fs.suid_dumpable = 0), and tell systemd-coredump to keep nothing (Storage=none). Grading reads those config files the way a CIS-CAT scan would.
What you'll do
- limits.conf forbids core dumps (* hard core 0)
- sysctl fs.suid_dumpable = 0
- systemd-coredump Storage = none
Hands-on lab: you work on a real Linux box in your browser, graded on the machine's actual state.