[systemd-devel] [PATCH] [RFCv7] Optionally save core dumps as plain files

Oleksii Shevchuk alxchk at gmail.com
Tue May 21 12:47:12 PDT 2013


> > For security reasons. It will be better if user will not have access to
> > own cores by default (situation is the same with journal backend in
> > upstream now).

> Why?

When apps like gpg/lastpass/whatelse-with-passwords crashes, then user probably
will not be very happy to have all that data accessible as is. Distros
like ubuntu even disable ptrace by default for non-root users

> But at the moment, I guess what you have is not too bad because we at
> least will honor quota for non-root users; my main concern was filling
> up even the ext4 reserved space for example.

Probably it isn't, because core fds created with root:systemd-journald, like
journal files


More information about the systemd-devel mailing list