I assume it's meant to be the first meaning, that the API is bad? But the censorship honestly makes me a bit unclear.
I'm not sure why people do this censoring; who are they trying to get into good relations with?
Either swear, or don't.
Compare https://tvtropes.org/pmwiki/pmwiki.php/Main/CensoredForComed...
Seems weird when you click through the link and it's the original social media post where the author censored himself. Just say "super poor" or something then.
[0]: https://groups.google.com/g/linux.kernel/c/hJLP3XcKKSY
[1]: https://mail-archive.com/linux-kernel@vger.kernel.org/msg107...
charcircuit•19h ago
Why is it not run as a dedicated core dump user?
>the core-dump socket to a helper can be intercepted
There have been several vulnerabilities related to this feature of passing core files to a container. I question if this feature is actually worth it considering one probably wants to have shared infrastructure for crash reporting anyways.
rwmj•17h ago
You could imagine an API that sets the UID of this user, and the kernel could easily run the coredump handler as that user, but the kernel can't so easily automate the creation of a complicated namespace to contain that process (and the process can't do it itself because it could be exploited before it gets around to it). Look at the code in runc some time to see how complicated setting up a namespace has got.
> one probably wants to have shared infrastructure for crash reporting anyways
Not really on a single machine. coredumpctl actually works very well for solo development, I use it all the time.
nolist_policy•15h ago
IIUC Ubuntu and systemd however choose to dump the process manually for some reason and for that you need to have same permission as the target process.
charcircuit•13h ago
No, I think there should be a dedicated user. People will configure it in insecure ways if you let them.
>easily automate the creation of a complicated namespace to contain that process
Why is this being done. The core dump has already been created.
>coredumpctl actually works
Coredumpctl would still be possible without forwarding.
bandrami•2h ago