Re: [PATCH] coredump - as root not only if euid switched

From: Andrew Morton
Date: Thu Apr 22 2004 - 04:58:43 EST

Peter Waechtler <pwaechtler@xxxxxxx> wrote:
> >(why are you trying to unlink the old file anyway?)
> >
> For security measure :O
> I tried on solaris: touch the core file as user, open it and wait, dump core
> as root -> nope, couldn't read the damn core - it was unlinked and created!

hm, OK. There's a window in which someone can come in and recreate the
file, but the open is using O_EXCL|O_CREATE so that seems safe enough.

To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at
Please read the FAQ at