> This patch introduces suid_dumpable=3 to allow privilege-changed > processes to be dumped only to a pipe handler (and not directly to > disk). The value of suid_dumpable=2 is now deprecated, and attempting > to set this sysctl value returns -EINVAL. > > Signed-off-by: Kees Cook <keescook@chromium.org>