Comment 2 for bug 1235436

> But it also looks to me like /usr/share/apport/apport does not write its crash files atomically... it opens the .crash file, writes to it, and closes it.

FTR, It opens the file with mode 0, and only chmods it to 600 once it's done writing (after closing). By any other method, inotify watches would also be triggered, so it seems best to only consider crash files which you can actually access.