ansible-hardening/doc/source/developer-notes/V-38675.rst

Ubuntu doesn't restrict core dumps by default, but the STIG requires that core dumps are disabled for all users unless absolutely necessary.

To opt-out of this change, set the following Ansible variable to no:

disable_core_dumps: no