Comment 12 for bug 1034340

Revision history for this message
Greg Law (glaw) wrote :

Hi Bryan,

I'd like just to revisit this before we close it as invalid if that's OK.

Could you reference me to the NFS discussion you refer to? It doesn't quite stack up to me for the following reasons:

(i) Dumping corefile on an NFS mounted directory using Ubuntu 12.04 on x86 works just fine for me.

(ii) On ARM a corefile is written, it's just that it has zero length. So security doesn't seem to be a sensible answer: either I can write to the directory, or I cannot (if I can write zero length files I could just fill the directory with zero-length files).

(iii) Requring root access is positively bad for security - in general we don't want things to be running as root unless they need to be.

(iv) Usually on NFS the opposite of what you say is true: typically NFS is mounted with "root squash" which means that if you are root you often cannot write to an NFS-mounted directory. So I can see how it would often be required *NOT* to run using sudo if you want a corefile to appear on NFS directories (but as per (ii) above, in this case if you were to run as root then I would expect no corefile, not a zero-length corefile.

Sorry to be a pain, but I think there is more to this.