# KNEL Security Limits Configuration
# SCAP/STIG compliant resource limits

# Prevent core dumps for all users
* hard core 0
* soft core 0

# Prevent core dumps for root
root hard core 0
root soft core 0

# Limit max processes for users (fork bomb protection)
* soft nproc 4096
* hard nproc 8192

# Limit max file handles
* soft nofile 1024
* hard nofile 4096

# Limit max memory lock
* hard memlock 64

# Limit max file size
* soft fsize 2097152
* hard fsize 4194304

# Stack size limit
* soft stack 8192
* hard stack 65536