Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 18 Sep 1999 12:14:45 +0100
From:      Ben Smithurst <ben@scientia.demon.co.uk>
To:        Spidey <beaupran@jsp.umontreal.ca>
Cc:        Freebsd Questions Mailing list <freebsd-questions@freebsd.org>
Subject:   Re: Limiting core dumps for users
Message-ID:  <19990918121445.A4234@lithium.scientia.demon.co.uk>
In-Reply-To: <14307.3231.325388.238041@freed.dyn.ez-ip.net>
References:  <14307.3231.325388.238041@freed.dyn.ez-ip.net>

next in thread | previous in thread | raw e-mail | index | archive | help
Spidey wrote:

> By the login.conf manpage, if I do this:
> 
> default:\
> [...]
>         :coredumpsize=0:\
> [...]
> 
> It will forbid users from doing core dumps. Am I right?

Should do. You *did* remember to do cap_mkdb /etc/login.conf, yes?

> If I am, why does this 'classless' user can do this:
> 
> bash-2.03$ cat > core.c
> /* do a coredump */
> 
> int main( int argc, char** argv) {
> 
> int *i = 0;
> i[0] = 1;
> 
> }
> bash-2.03$ gcc core.c -o core
> bash-2.03$ ./core 
> Segmentation fault (core dumped)
> bash-2.03$ ls -l core*
> -rwxr-xr-x  1 marc  guest    3084 Sep 17 23:18 core
> -rw-r--r--  1 marc  guest      82 Sep 17 23:18 core.c
> -rw-------  1 marc  guest  266240 Sep 17 23:19 core.core
> bash-2.03$ 

Try `limits` at that prompt to see what the coredump limit actually
is. If you've done cap_mkdb, and it still shows a non-zero value for
coredumpsize, then I don't know.

> FreeBSD freed.dyn.ez-ip.net 3.3-RC FreeBSD 3.3-RC #16: Fri Sep 10
> 21:09:10 EDT 1999
> spidey@freed.dyn.ez-ip.net:/usr/src/sys/compile/HALL  i386
> 
> which.... hum... is supposed to be -stable, but I think is the
> 'pre-release' am I right? What is -RC?

Release Candidate.

-- 
Ben Smithurst            | PGP: 0x99392F7D
ben@scientia.demon.co.uk |   key available from keyservers and
                         |   ben+pgp@scientia.demon.co.uk


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?19990918121445.A4234>