1#  This file is part of systemd.
2#
3#  systemd is free software; you can redistribute it and/or modify it
4#  under the terms of the GNU Lesser General Public License as published by
5#  the Free Software Foundation; either version 2.1 of the License, or
6#  (at your option) any later version.
7
8# See sysctl.d(5) for the description of the files in this directory.
9
10# Pipe the core file to systemd-coredump. The systemd-coredump process spawned
11# by the kernel will start a second copy of itself as the
12# systemd-coredump@.service, which will do the actual processing and storing of
13# the core dump.
14#
15# See systemd-coredump(8) and core(5).
16kernel.core_pattern=|{{ROOTLIBEXECDIR}}/systemd-coredump %P %u %g %s %t %c %h
17
18# Allow 16 coredumps to be dispatched in parallel by the kernel.
19# We collect metadata from /proc/%P/, and thus need to make sure the crashed
20# processes are not reaped until we have finished collecting what we need. The
21# kernel default for this sysctl is "0" which means the kernel doesn't wait for
22# userspace to finish processing before reaping the crashed processes. With a
23# higher setting the kernel will delay reaping until we are done, but only for
24# the specified number of crashes in parallel. The value of 16 is chosen to
25# match systemd-coredump.socket's MaxConnections= value.
26kernel.core_pipe_limit=16
27
28# Also dump processes executing a set-user-ID/set-group-ID program that is
29# owned by a user/group other than the real user/group ID of the process, or
30# a program that has file capabilities. ("2" is called "suidsafe" in core(5)).
31#
32# systemd-coredump will store the core file owned by the effective uid and gid
33# of the running process (and not the filesystem-user-ID which the kernel uses
34# when saving a core dump).
35#
36# See proc(5), setuid(2), capabilities(7).
37fs.suid_dumpable=2
38