Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email firstname.lastname@example.org
Re: sysctl knob to let sugid processes dump core (pr 15994)
From: Elad Efrat (eladNetBSD.org)
Date: Fri Jan 13 2006 - 12:15:44 CST
Garrett D'Amore wrote:
> These checks maybe should be enabled by yet another sysctl, in case some
> site has some special reason not to enforce them.
It seems like this is getting way too bloated. The original request was
for a knob to be used on development machines; I'm not sure who would
want to enable such a feature on a production box.
The suggestion of setting a directory and owner via sysctl seems enough
for me; root should take care of anything around it.