> should savecore(8) do a umask(02) before writing any files, to ensure
> that users won't be able to read kernels anyway?  theoretically, they
> shouldn't be able to get into /var/crash ...

Huh?  umask(2) will prevent your coredumps only from being world-writable.
To prevent them from being world-accessable at all use umask(7).
--
ws@TooLs.DE     (Wolfgang Solfrank, TooLs GmbH) 	+49-228-985800