#1654 F26 System Wide Change: Enable systemd-coredump by default
Closed: Fixed 7 years ago Opened 7 years ago by jkurik.

For the FESCo meeting to discuss/approve as the Change Proposal was announced on devel-announce@ list on 2016-Dec-05.

Enable systemd-coredump by default. Core dumps will be accessible via the coredumpctl tool.


systemd-coredump (or, rather, journald) ignores the split between system accounts and user accounts as configured in /etc/login.defs ("the authoritative definition of UID/GID space allocation", according to the Fedora wiki) and instead hard codes 1000 as the split*.

The end result is that when systemd-coredump enabled, unprivileged users cannot access their own core dumps. (Or any of their own logs in journald.)

This means that if you are a loyal Fedora user that initially installed before the change from 500 to 1000 (Fedora 15 or earlier) and have been faithfully upgrading from release to release, enabling systemd-coredump by default in Fedora 26 will be a regression in functionality.
(Obviously, systemd is also broken if your organization has a need to change the SYS_UID_MAX definition in /etc/login.defs for some reason.)

systemd-coredump should not be enabled by default in Fedora until this bug is fixed by the systemd developers.

Note that the systemd developers deny that this is a bug and are adamantly opposed to the idea of fixing it, so this change should never be enabled.

Fedora bug was: https://bugzilla.redhat.com/show_bug.cgi?id=1401772
Upstream bug was: https://github.com/systemd/systemd/issues/3855

*: It's actually more egregious than that: /etc/login.defs is parsed on the build machine at compile time and the extracted value is hard coded into the various systemd executables which then completely ignore /etc/login.defs at run time.

In the 2016/12/16 FESCo meeting, this change was approved, given that the systemd folks solve the SELinux issue that is currently keeping it from working.

@jsmith changed the status to Closed

7 years ago

Login to comment on this ticket.

Metadata