(feature) [COTEF1901-104] Improved test 1.6.4 (coredump.conf)

[jvleminc]

A few recommended settings in /etc/coredump.conf were omitted. This PR adds them, as per the recommendations:

Solution: Add the following line to /etc/security/limits.conf or a /etc/security/limits.d/* file:

* hard core 0

Set the following parameter in /etc/sysctl.conf or a /etc/sysctl.d/* file:

fs.suid_dumpable = 0

Run the following command to set the active kernel parameter:

# sysctl -w fs.suid_dumpable=0

If systemd-coredump is installed:         
edit /etc/systemd/coredump.conf and add/modify the following lines:   <-----------

Storage=none
ProcessSizeMax=0

Run the command:

systemctl daemon-reload

[alivx]

If systemd-coredump is installed, then you can add the new config.

Storage=none ProcessSizeMax=0 Run the command: systemctl daemon-reload
so, you must check if 'systemd-coredump' is installed first, then you can apply these changes.
or, you can put it in default/main.yaml as config.

Thank you for your effort mate :)

[jvleminc]

Hmm, right before the lines I added, systemd-coredump is installed:

    - name: 1.6.4 Ensure core dumps are restricted
      apt:
        name: systemd-coredump
        state: present

So no need for a check. :-)

[alivx]

Merged.
Can you please check issue #1 (👍🏻 @jvleminc :) )