Don't do core dumps
net sysctl rules, set umask