Bug 32029 - insecure core_pattern
Summary: insecure core_pattern
Status: CLOSED FIXED
Alias: None
Product: Sisyphus
Classification: Development
Component: systemd-utils (show other bugs)
Version: unstable
Hardware: all Linux
: P3 critical
Assignee: Alexey Shabalin
QA Contact: qa-sisyphus
URL:
Keywords:
Depends on: 9780
Blocks:
  Show dependency tree
 
Reported: 2016-04-27 17:02 MSK by Dmitry V. Levin
Modified: 2017-03-01 10:22 MSK (History)
3 users (show)

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Dmitry V. Levin 2016-04-27 17:02:22 MSK 
$ cat /lib/sysctl.d/49-coredump-null.conf
# disable core dump.
kernel.core_pattern = /dev/null

Вместо /dev/null должно быть написано /
иначе ядро заменяет /dev/null коркой привилегированного процесса.
Comment 1 Repository Robot 2016-04-27 23:28:57 MSK 
systemd-1:229-alt4 -> sisyphus:

* Wed Apr 27 2016 Alexey Shabalin <shaba@altlinux> 1:229-alt4
- fixed insecure core_pattern (ALT #32029)
- add enable kdm4 to preset (ALT #32027)