tech-security: Re: sysctl knob to let sugid processes dump core (pr 15994)

Subject: Re: sysctl knob to let sugid processes dump core (pr 15994)
To: None <elad@NetBSD.org>
From: YAMAMOTO Takashi <yamt@mwd.biglobe.ne.jp>
List: tech-security
Date: 02/20/2006 07:02:00

> > i personally prefer kern.core.*, but kern.setid_core.* is also fine for me.
> 
> don't you think kern.core.* is confusing for coredumps of set-id
> processes?

i don't think so, as far as "*" includes something which
indicates it's for setid processes.  eg. kern.core.setid.path ?

btw, s/core/coredump/ might be better as "core" is a too vague term.

YAMAMOTO Takashi