From owner-freebsd-stable@FreeBSD.ORG Wed Nov 1 21:18:05 2006 Return-Path: X-Original-To: freebsd-stable@freebsd.org Delivered-To: freebsd-stable@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 3940116A40F for ; Wed, 1 Nov 2006 21:18:05 +0000 (UTC) (envelope-from jdc@koitsu.dyndns.org) Received: from sccrmhc11.comcast.net (sccrmhc11.comcast.net [204.127.200.81]) by mx1.FreeBSD.org (Postfix) with ESMTP id 62E0F43D69 for ; Wed, 1 Nov 2006 21:18:00 +0000 (GMT) (envelope-from jdc@koitsu.dyndns.org) Received: from icarus.home.lan (c-67-174-220-97.hsd1.ca.comcast.net[67.174.220.97]) by comcast.net (sccrmhc11) with ESMTP id <2006110121175901100cjno0e>; Wed, 1 Nov 2006 21:17:59 +0000 Received: by icarus.home.lan (Postfix, from userid 1000) id B90AC1FA01A; Wed, 1 Nov 2006 13:17:58 -0800 (PST) Date: Wed, 1 Nov 2006 13:17:58 -0800 From: Jeremy Chadwick To: Nguyen Tam Chinh Message-ID: <20061101211758.GA38225@icarus.home.lan> Mail-Followup-To: Nguyen Tam Chinh , Mark Andrews , freebsd-stable@freebsd.org References: <200611011927.kA1JRCCE002777@drugs.dv.isc.org> <20061101231511.U923@it.hackers> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20061101231511.U923@it.hackers> X-PGP-Key: http://jdc.parodius.com/pubkey.asc User-Agent: Mutt/1.5.13 (2006-08-11) Cc: Mark Andrews , freebsd-stable@freebsd.org Subject: Re: bind9 trouble in -PRERELEASE X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 01 Nov 2006 21:18:05 -0000 On Wed, Nov 01, 2006 at 11:40:39PM +0300, Nguyen Tam Chinh wrote: > I don't think that I can do a stack backtrace when named left no core > after that. No core is being left either due to limits (limit/ulimit) being imposed on the user or group 'bind', or because chroot precautions are being used. The way to work around this, assuming the box isn't being used by end-users for application development (thus needing their own corefiles for their apps), is to do the following in sysctl.conf: kern.sugid_coredump=1 kern.corefile=/some/absolute/path/%N.%P.core You can adjust these in realtime with sysctl as well. Be sure to specify an absolute path that the 'bind' account has write access to, and is big enough to fit a decent-sized coredump. If you have a large /var filesystem, /var/tmp is an OK place. -- | Jeremy Chadwick jdc at parodius.com | | Parodius Networking http://www.parodius.com/ | | UNIX Systems Administrator Mountain View, CA, USA | | Making life hard for others since 1977. PGP: 4BD6C0CB |