Ok, I've committed the basic ownership check to the coredump code for
     this release.  I did verify that sgid dumps still work (when enabled
     via the sysctl).

     I have not committed the group/other permissions check, at least not
     yet.  It seems a little excessive considering the access needed to
     exploit such a hole is of far greater consequence then any desire to
     use it to exploit the core dump path would be.

                                                -Matt

Reply via email to