On Sat, 12 Aug 2017, Stuart Henderson wrote: > On 2017/07/13 17:16, Stuart Henderson wrote: > > I've seen this a lot recently (14 = EFAULT) > > > > 2017-07-13T16:05:57.935Z symphytum /bsd: coredump of Xorg(62706), write > > failed: errno 14 > > 2017-07-13T16:05:57.993Z symphytum /bsd: coredump of chrome(46797), write > > failed: errno 14 > > 2017-07-13T16:05:58.081Z symphytum /bsd: coredump of vi(26461), write > > failed: errno 14 > > 2017-07-13T16:05:58.124Z symphytum /bsd: coredump of ksh(24425), write > > failed: errno 14 > > > > partial coredumps get saved but they aren't usable with gdb.. > > This is with kern.nosuidcoredump=2, there's plenty of space in /var/crash. > > > > Any ideas? > > And a number of similar ones with EACCES now. These are all truncated. > > total 7904 > -rw-r--r-- 1 root wheel 5 May 31 00:21 minfree > -rw------- 1 root wheel 196744 Aug 11 23:05 mysqld.core > -rw------- 1 root wheel 21840 Aug 12 09:56 nginx.core > -rw------- 1 root wheel 112536 Aug 12 00:55 rspamd.core > -rw------- 1 root wheel 3654504 Aug 11 22:58 unbound.core
What's the readelf -a output for one or more of these? Philip