Hacker News Reader

I'm not at my laptop right now, but from https://www.freedesktop.org/software/systemd/man/coredumpctl...

It looks like coredumpctl might be suid? Or that the service is, and coredumpctl gets access through the service - so there's a certain elevation going on either way?

View on HN

It's not. It sets ACLs so that the user that owns the process may read the coredump, but typical ls doesn't show that.

ls -l will note the presence of ACLs with a "+" next to the permissions. I typically `ls -l` or just have that aliased to ll if it isn't already… (but YMMV)

Reply on news.ycombinator.com