When kern.nosuidcoredump=3, act like =2 but try to dump cores into the /var/crash/programname/ directory, as root. For instance,     # mkdir /var/crash/bgpd/     # chmod 700 /var/crash/bgpd/    # If you skip this step, you are a moron     # sysctl kern.nosuidcoredump=3     # bgpd     # pkill -ABRT bgpd     # ls /var/crash/bgpd/     14764.core   23207.core   6423.core Of course, in real life the idea is that you don't kill the daemon but it crashes and you collect parallel cores.  Careful you don't fill your /var. Further tuneables are being considered.
When kern.nosuidcoredump=3, act like =2 but try to dump cores into
the /var/crash/programname/ directory, as root. For instance,
    # mkdir /var/crash/bgpd/
    # chmod 700 /var/crash/bgpd/    # If you skip this step, you are a moron
    # sysctl kern.nosuidcoredump=3
    # bgpd
    # pkill -ABRT bgpd
    # ls /var/crash/bgpd/
    14764.core   23207.core   6423.core
Of course, in real life the idea is that you don't kill the daemon but it
crashes and you collect parallel cores.  Careful you don't fill your /var.
Further tuneables are being considered.

Sorry to be picking on bgpd for this example.  I've watched the "too
difficult to debug privsep code" angst for far too long.
ok guenther

orumin/openbsd-efivars,orumin/openbsd-efivars,orumin/openbsd-efivars,orumin/openbsd-efivars