Re: [PATCH 1/3] coredump: cleanup documentation for suid_dumpable

!MAILaRCHIVE_VOTE_RePLACE
Previous message: [thread] [date] [author]
Next message: [thread] [date] [author]
To: Eugene Teo <eugeneteo@...>
Cc: <linux-kernel@...>, Kawai, Hidehiro <hidehiro.kawai.ez@...>, Neil Horman <nhorman@...>, Bryan Wu <bryan.wu@...>
Date: Wednesday, August 1, 2007 - 8:28 am

> > NAK - this feature is actively used and can be set by the sysctl

Not programs - people. 

When you want to debug a large complex system with multiple setuid
applications it can rapidly get quite unpleasant. If you
set /proc/sys/kernel/suid_dumpable to 2 and /proc/sys/kernel/core_pattern
then it becomes possible to get hold of all the core dumps and debug the
system as a whole. The system is not secure in this state but while you
are doing that kind of debug on a devel system its usually acceptable.

Secondly we don't break userspace interfaces except in extreme cases -
proc/sys/kernel/suid_dumpable is a user space interface

Alan
-
Previous message: [thread] [date] [author]
Next message: [thread] [date] [author]

Messages in current thread:
[PATCH 0/3] coredump: setuid core dump cleanups, Eugene Teo, (Tue Jul 31, 3:02 am)
Re: [PATCH 1/3] coredump: cleanup documentation for suid_dum..., Alan Cox, (Wed Aug 1, 8:28 am)