Skip to content

Commit 1a4f039

Browse files
authored
[quagga] enable core dump for bgpd and zebra (#927)
* [core dump] pass unix time to coredump-compress script Currently we only have program name (e.g. bgpd) and PID in the core file name. PID could collide especially after docker restart or recreate. Passing the unix time to coredump-compress so it could also add time to the core file name. * [utilities] include the change to coredump_compress script * [quagga] enable core dump for bgpd and zebra bgpd and zebra downgrade their privilege shortly after started. For that sysctrl kernel.suid_dumpable needs to be set to 2, so that they can dump core. Note that fs.suid_dumpable SHOULD NOT be set to 1. Which will bypass all system security.
1 parent 9c87eff commit 1a4f039

2 files changed

Lines changed: 3 additions & 2 deletions

File tree

build_debian.sh

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -239,10 +239,11 @@ EOF
239239
## Config sysctl
240240
sudo mkdir -p $FILESYSTEM_ROOT/var/core
241241
sudo augtool --autosave "
242-
set /files/etc/sysctl.conf/kernel.core_pattern '|/usr/bin/coredump-compress %e %p'
242+
set /files/etc/sysctl.conf/kernel.core_pattern '|/usr/bin/coredump-compress %e %t %p'
243243
244244
set /files/etc/sysctl.conf/kernel.softlockup_panic 1
245245
set /files/etc/sysctl.conf/kernel.panic 10
246+
set /files/etc/sysctl.conf/fs.suid_dumpable 2
246247
247248
set /files/etc/sysctl.conf/net.ipv4.conf.default.forwarding 1
248249
set /files/etc/sysctl.conf/net.ipv4.conf.all.forwarding 1

src/sonic-utilities

0 commit comments

Comments
 (0)