Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 20 Jan 2010 14:46:12 -0600
From:      "Doug Poland" <doug@polands.org>
To:        "Chuck Swiger" <cswiger@mac.com>
Cc:        Doug Poland <doug@polands.org>, questions Questions <questions@freebsd.org>
Subject:   Re: Trouble getting a core dump from clamd
Message-ID:  <0cc4c74334a73d21b31ad06d41e3779a.squirrel@email.polands.org>
In-Reply-To: <6C738BD4-71EE-4F34-8DB5-ABDB45A06C89@mac.com>
References:  <db60663b086aed5329984a666b8b7e08.squirrel@email.polands.org> <d36406631001190910g5c56b43en9ca9b87bf244a40d@mail.gmail.com> <a3de0a40551edaedbb49b1d5ac2366a2.squirrel@email.polands.org> <6C738BD4-71EE-4F34-8DB5-ABDB45A06C89@mac.com>

Next in thread | Previous in thread | Raw E-Mail | Index | Archive | Help

On Tue, January 19, 2010 12:35, Chuck Swiger wrote:
> Hi--
>
> On Jan 19, 2010, at 10:04 AM, Doug Poland wrote:
>> No joy.
>>
>> # sysctl kern.corefile=/var/crash/clamd.core
>> # /usr/local/etc/rc.d/clamav-clamd start
>>  Starting clamav_clamd.
>>  Segmentation fault
>> # ll /var/crash
>>  total 2
>>  -rw-r--r--  1 root  wheel  5 Apr 10  2005 minfree
>
> Please see "man 5 core"; in particular, clamd changes userid:
>
> By default, a process that changes user or group credentials
> whether real or effective will not create a corefile.  This behaviour
> can be changed to generate a core dump by setting the sysctl(8)
> variable
>      kern.sugid_coredump to 1.
>
> ...so you will need to toggle that sysctl also.  I'd suggest doing
> something more like:
>
> mkdir /cores
> chmod 1777 /cores
> sysctl kern.sugid_coredump=1
> sysctl kern.corefile=/cores/%N.%P.core
>
> ...but adjust the path to be under /var or /usr if free diskspace
> makes doing so necessary.
>
Thanks for the suggestion and the pointer to man 5 core.  I
implemented your suggestions but still get no core dump.  Very
strange...



-- 
Regards,
Doug




Want to link to this message? Use this URL: <http://docs.FreeBSD.org/cgi/mid.cgi?0cc4c74334a73d21b31ad06d41e3779a.squirrel>