Files
systemd/units
Etienne Cordonnier 4ac1755be2 coredump: set ProtectHome to read-only
In 924453c225
ProtectHome was set to true for systemd-coredump in order to reduce risk, since an attacker could craft a malicious binary in order to compromise systemd-coredump.
At that point the object analysis was done in the main systemd-coredump process.
Because of this systemd-coredump is unable to product symbolicated call-stacks for binaries running under /home ("n/a" is shown instead of function names).

However, later in 61aea456c1 systemd-coredump was changed to do the object analysis in a forked process,
covering those security concerns.

Let's set ProtectHome to read-only so that systemd-coredump produces symbolicated call-stacks for processes running under /home.
2024-09-06 13:30:36 +02:00
..
2022-07-20 13:15:37 +09:00
2024-03-16 05:31:44 +09:00
2024-03-16 05:31:44 +09:00
2024-03-14 11:14:10 +01:00
2024-03-14 11:14:10 +01:00
2024-03-14 11:14:10 +01:00