From owner-freebsd-questions@FreeBSD.ORG Wed Jan 20 20:46:14 2010 Return-Path: Delivered-To: questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id CF1BA1065676 for ; Wed, 20 Jan 2010 20:46:14 +0000 (UTC) (envelope-from doug@polands.org) Received: from hrndva-omtalb.mail.rr.com (hrndva-omtalb.mail.rr.com [71.74.56.124]) by mx1.freebsd.org (Postfix) with ESMTP id 892598FC0A for ; Wed, 20 Jan 2010 20:46:14 +0000 (UTC) X-Authority-Analysis: v=1.0 c=1 a=5-nTKeNrujAA:10 a=5oGaD+IacabtnYYqBVNCkQ==:17 a=L_1cJBfBgv8667o24sEA:9 a=MfC-zFcK7NjaphViosRYfrqaZaAA:4 X-Cloudmark-Score: 0 X-Originating-IP: 75.87.219.217 Received: from [75.87.219.217] ([75.87.219.217:56828] helo=haran.polands.org) by hrndva-oedge03.mail.rr.com (envelope-from ) (ecelerity 2.2.2.39 r()) with ESMTP id 9F/1A-05903-59B675B4; Wed, 20 Jan 2010 20:46:13 +0000 Received: from email.polands.org (ammon.polands.org [172.16.1.7]) by haran.polands.org (8.14.3/8.14.3) with ESMTP id o0KKkCQt023202; Wed, 20 Jan 2010 14:46:12 -0600 (CST) (envelope-from doug@polands.org) Received: from 209.103.214.34 (SquirrelMail authenticated user djp) by email.polands.org with HTTP; Wed, 20 Jan 2010 14:46:12 -0600 Message-ID: <0cc4c74334a73d21b31ad06d41e3779a.squirrel@email.polands.org> In-Reply-To: <6C738BD4-71EE-4F34-8DB5-ABDB45A06C89@mac.com> References: <6C738BD4-71EE-4F34-8DB5-ABDB45A06C89@mac.com> Date: Wed, 20 Jan 2010 14:46:12 -0600 From: "Doug Poland" To: "Chuck Swiger" User-Agent: SquirrelMail/1.4.20-RC2 MIME-Version: 1.0 Content-Type: text/plain;charset=iso-8859-1 Content-Transfer-Encoding: 8bit X-Priority: 3 (Normal) Importance: Normal Cc: Doug Poland , questions Questions Subject: Re: Trouble getting a core dump from clamd X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 20 Jan 2010 20:46:14 -0000 On Tue, January 19, 2010 12:35, Chuck Swiger wrote: > Hi-- > > On Jan 19, 2010, at 10:04 AM, Doug Poland wrote: >> No joy. >> >> # sysctl kern.corefile=/var/crash/clamd.core >> # /usr/local/etc/rc.d/clamav-clamd start >> Starting clamav_clamd. >> Segmentation fault >> # ll /var/crash >> total 2 >> -rw-r--r-- 1 root wheel 5 Apr 10 2005 minfree > > Please see "man 5 core"; in particular, clamd changes userid: > > By default, a process that changes user or group credentials > whether real or effective will not create a corefile. This behaviour > can be changed to generate a core dump by setting the sysctl(8) > variable > kern.sugid_coredump to 1. > > ...so you will need to toggle that sysctl also. I'd suggest doing > something more like: > > mkdir /cores > chmod 1777 /cores > sysctl kern.sugid_coredump=1 > sysctl kern.corefile=/cores/%N.%P.core > > ...but adjust the path to be under /var or /usr if free diskspace > makes doing so necessary. > Thanks for the suggestion and the pointer to man 5 core. I implemented your suggestions but still get no core dump. Very strange... -- Regards, Doug