The design of core dump handling in Linux leaves much to be desired. Among its several flaws, the biggest is that it is a global setting, accessible only by the

The design of core dump handling in Linux leaves much to be desired. Among its several flaws, the biggest is that it is a global setting, accessible only by the root user. A proper design would either allow it to be isolated via namespace, or delegated to a reaper/subreaper process (in an opt-in fashion for back-compat). There has been discussion of the former idea [0] and even a submitted patch [1], but it seems like it never went anywhere. [0]: https://groups.google.com/g/linux.kernel/c/hJLP3XcKKSY https://groups.google.com/g/linux.kernel/c/hJLP3XcKKSY [1]: https://mail-archive.com/linux-kernel@vger.kernel.org/msg1077867.html https://mail-archive.com/linux-kernel@vger.kernel.org/msg107...