* Jonny Grant <jg@xxxxxxxx>, 2020-06-06, 14:18:
3) Could i ask to clarify my understanding. For this "The binary being
executed by the process does not have read
permission enabled."
-- is this when the binary permissions are changed after it starts
running?
No, AFAICS the permission check is done when the process starts.
4) I noticed %P always gave me P1200 even after a reboot I recall, I
had expected it be '1', do you see similar?
Here %P expands to the pid of the process, as expected:
$ uname -rv
5.6.0-2-amd64 #1 SMP Debian 5.6.14-1 (2020-05-23)
$ sudo sysctl -w kernel.core_pattern="%P-%e-%s.core"
kernel.core_pattern = %P-%e-%s.core
$ ulimit -c unlimited
$ sh -c 'kill -ABRT $$'
Aborted (core dumped)
$ ls *.core
7154-sh-6.core
--
Jakub Wilk