Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Documentation update #88

Merged
merged 1 commit into from
Jul 11, 2017
Merged

Documentation update #88

merged 1 commit into from
Jul 11, 2017

Conversation

mcgege
Copy link
Member

@mcgege mcgege commented Jun 21, 2017

Complement missing parameters / description in README

@mcgege
Copy link
Member Author

mcgege commented Jun 21, 2017

BTW: why are there two parameters to prevent core dumps?

  • enable_core_dump
  • allow_core_dumps

@artem-sidorenko
Copy link
Member

@mcgege many thanks for this PR!

@bitvijays I'll have a look to all PRs from @mcgege. Could you maybe review them too?

@bitvijays
Copy link
Contributor

bitvijays commented Jun 21, 2017

@mcgege Thank you for updating the ReadMe. Regarding enable_core_dump and allow_core_dump:

enable_core_dump is to control the sysctl manifest whereas allow_core_dump is to control the profile manifest file. ( both present in the init.pp). The comment in profile.conf ( file deployed for allow_core_dump ) is "Disable core dumps via soft limits for all users. Compliance to this setting is voluntary and can be modified by users up to a hard limit. This setting is a sane default.". Seems there is issue raised for this? #68

@artem-sidorenko Do you have more information about this? Also, the changes seems fine ( Updates in ReadMe only)

@mcgege
Copy link
Member Author

mcgege commented Jun 26, 2017

@bitvijays Thanks for the clarification ... but I still don't see the point in having two distinct switches here :-)
I would expect a switch that either completely prevents core dump creation or leaves it untouched.

And regarding the issue #68 I guess this: with enable_core_dump / allow_core_dumps = false (the default) the files are created, and if you change afterwards to true the files are not deleted (submitted #91 to fix this) ...

@artem-sidorenko
Copy link
Member

I'll have a look here somewhere today/tomorrow

@artem-sidorenko
Copy link
Member

indeed we have here two switches more or less for the same thing. I checked this with chef-os-hardnening, all this things are matched to one option enable_core_dump.

My sugeestion would be to keep enable_core_dump and to remove/replace the allow_core_dumps

@mcgege @bitvijays what do you think?

@artem-sidorenko
Copy link
Member

I merged #91 to avoid any conflicts

@mcgege
Copy link
Member Author

mcgege commented Jul 2, 2017

That's fine for me ... I'll provide a PR the next days for this and change the documentation

@mcgege
Copy link
Member Author

mcgege commented Jul 3, 2017

Removed allow_core_dumps from documentation

@mcgege
Copy link
Member Author

mcgege commented Jul 11, 2017

@bitvijays How about merging this? I just cleaned up the conflict ...

@bitvijays
Copy link
Contributor

Thanks @mcgege for the PR. Merged :)

@bitvijays bitvijays merged commit 33cd685 into dev-sec:master Jul 11, 2017
@mcgege mcgege deleted the documentation branch July 21, 2017 08:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants