Disable core dumps via kernel.core_pattern

Description

The kernel.core_pattern sysctl must be configured to pipe core dumps to /bin/false, effectively discarding them. This prevents core dump data from being written to disk.

Rationale

Core dumps can contain sensitive information from application memory. Setting core_pattern to pipe to /bin/false ensures no core dump data is stored, even if other core dump restrictions are bypassed.

Framework references

Live verification