fs.suid_dumpable=0
kernel.core_pattern=|/bin/false