Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 30 Jan 2001 18:51:19 -0800
From:      Kris Kennaway <kris@obsecurity.org>
To:        mph <mph@fabel.dk>
Cc:        freebsd-questions@FreeBSD.ORG
Subject:   Re: missing coredump after setuid()
Message-ID:  <20010130185119.K54217@xor.obsecurity.org>
In-Reply-To: <3A77522E.7371FB51@fabel.dk>; from mph@fabel.dk on Wed, Jan 31, 2001 at 12:45:50AM %2B0100
References:  <3A77522E.7371FB51@fabel.dk>

next in thread | previous in thread | raw e-mail | index | archive | help

--rCb8EA+9TsBVtA92
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Wed, Jan 31, 2001 at 12:45:50AM +0100, mph wrote:
> hi,
>=20
> I'm writing some cgistuff I'd like to get core files when something is
> wrong. The kernel (I guess, the limits in login.conf are unlimited)
> refuses to give coredumps to programs that have called setuid() if the
> kern.sugid_coredump is false, at least it doesn't show "core dumped". Af
> I set kern.sugid_coredump to 1 to claims core to be dumped but the core
> file in question doesn't exist on the disk. I've verified permissions on
> current dirs, apache's ServerRoot and apache's CoreDumpDirectory, but it
> didn't work out. I'm using FreeBSD 4.1.1-RELEASE.

Probably the program isn't running with privileges which allow it to
dump into it's current working directory, or it's dumping in a
different place to where you think it is (if the process does a cd,
chroot, etc, the working directory will change).

As a hack, you can use the kern.corefile sysctl to force all
applications to dump into a given directory.

Kris

--rCb8EA+9TsBVtA92
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.4 (FreeBSD)
Comment: For info see http://www.gnupg.org

iD8DBQE6d32nWry0BWjoQKURAgkyAJ9GS6sozJBl9acjkhZo4joQGwi0FgCgzw6d
8T88gH89IZSVByIuV25ZPZE=
=k2og
-----END PGP SIGNATURE-----

--rCb8EA+9TsBVtA92--


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010130185119.K54217>