Hi all,

The core files are moved to a partition in my server using the coreadm utility. But the owner of the core files created is root. So other users are not having privillege to analys the same.


-rw------- 1 root root 56512875 Apr 27 17:05 tpm007_upd_local.N820.114.16281.core
-rw------- 1 root root 32367223 Apr 27 17:33 tpm039_ta_contro.N820.111.8082.core
-rw------- 1 root root 57029731 Apr 27 17:33 tpm007_ws_upd_lo.N820.111.8084.core
-rw------- 1 root root 111070755 Apr 28 11:50 crewxa.N820.111.16598.core

----------------------------------------------------------------
The output of the coreadm command is given below

# coreadm
global core file pattern: /data1/coredumps/cts/%f.%n.%u.%p.core
global core file content: default
init core file pattern: /data1/coredumps/cts/%f.%n.%u.%p.core
init core file content: default
global core dumps: enabled
per-process core dumps: enabled
global setid core dumps: enabled
per-process setid core dumps: enabled
global core dump logging: enabled

--------------------------------------------------------
The content of /etc/coreadm.conf is
#
# coreadm.conf
#
# Parameters for system core file configuration.
# Do NOT edit this file by hand -- use coreadm(1) instead.
#
COREADM_GLOB_PATTERN=/data1/coredumps/cts/%f.%n.%u.%p.core
COREADM_GLOB_CONTENT=default
COREADM_INIT_PATTERN=/data1/coredumps/cts/%f.%n.%u.%p.core
COREADM_INIT_CONTENT=default
COREADM_GLOB_ENABLED=yes
COREADM_PROC_ENABLED=yes
COREADM_GLOB_SETID_ENABLED=yes
COREADM_PROC_SETID_ENABLED=yes
COREADM_GLOB_LOG_ENABLED=yes

------------------------------------------------------

Anything more to be done here?

man coreadm or refer the CIS benchmark, you will get more information about it.