Disable core dumps via pam

2025-09-19 22:32:52 -07:00
parent 9f57a00ffe
commit 6c2ae1efed
1 changed files with 5 additions and 0 deletions
--- a/system/linux/system.nix
+++ b/system/linux/system.nix
@@ -12,4 +12,9 @@
  # Disable coredumps to prevent filling up /var/lib/systemd/coredump/
  # Coredumps can quickly consume large amounts of disk space
  systemd.coredump.enable = false;
+
+  # Disable core dumps.
+  security.pam.loginLimits = [
+    { domain = "*"; item = "core"; type = "hard"; value = "0"; }
+  ];
 }