]> git.ipfire.org Git - thirdparty/systemd.git/commit
coredump: let's always drop privileges 29803/head
authorLennart Poettering <lennart@poettering.net>
Wed, 1 Nov 2023 09:00:05 +0000 (10:00 +0100)
committerLennart Poettering <lennart@poettering.net>
Wed, 1 Nov 2023 09:02:04 +0000 (10:02 +0100)
commitc8e9476386fa9218720db0aada03c67dc89720b1
treeb9af489ed1127d9bd6ca2a4c75177de28c280dac
parent6fea39bacc53de2b14f12b434d4a4907cbf554a2
coredump: let's always drop privileges

Let's unconditionally drop privileges before submitting the coredump log
message.

Let's make the codepaths where we acquired a coredump and where we
didn't more alike: let's drop privs in both cases.

This is not only safer, but means that the coredump messages are always
accessible by the owner of the aborted process.
src/coredump/coredump.c