On Tue, 30 Jan 2018, Borislav Petkov wrote:
> On Tue, Jan 30, 2018 at 01:23:17PM -0800, Tim Chen wrote:
> > I'm less familiar with gpg-agent. Dave was the one who
> > put in comments about gpg-agent in this patch so perhaps
> > he can comment.
>
> So I looked at gpg-agent and AFAICT, it disables core dumping with
> setrlimit().
setrlimit() does not end up fiddling with the dumpable bits in
mm->flags. So no.
> I wasn't able to attach to it either with gdb but didn't find where we
> disable the attaching, for the couple of minutes I grepped through it.
prctl(PR_SET_DUMPABLE, 0) = 0
That does the trick.
Thanks,
tglx
