tjh.dev / nixpkgs
Clone of https://github.com/NixOS/nixpkgs.git (to stress-test knotserver)
fork atom

vault: set coredump ulimit to 0

authored by Jelle Besseling and committed by GitHub 53a3ddfa 04af42f3

+1
unified split
+1
nixos/modules/services/security/vault.nix
··· 221 ProtectHome = "read-only"; 222 AmbientCapabilities = "cap_ipc_lock"; 223 NoNewPrivileges = true; 224 KillSignal = "SIGINT"; 225 TimeoutStopSec = "30s"; 226 Restart = "on-failure";
··· 221 ProtectHome = "read-only"; 222 AmbientCapabilities = "cap_ipc_lock"; 223 NoNewPrivileges = true; 224 + LimitCORE = 0; 225 KillSignal = "SIGINT"; 226 TimeoutStopSec = "30s"; 227 Restart = "on-failure";