Why are core dumps enabled by default in Debian 9.1? I've learned that they are a security risk and just disabled them.Isn't it the case that the majority of Debian's users don't need core dumps and that even if they'd need them they could enable them? Wouldn't this be a better solution than having built in a security weakness by default? For instance there could be an option in the settings (e.g. Developer settings under Advanced settings) that allows one to easily switch on core dumps by executing the commands of the linked tutorial as root (there could even be a timer for how long they should be enabled)?I'd guess that the main reason would be to allow users to submit more information on crashes to developers. But how often is this actually getting used? Aren't most bugs reported in the form of descriptions what a user has done before the failure and so on? From what I know submitting core dumps isn't something many users do - and most of the time it's only employees / beta-testers (who could easily enable them). Isn't the cost-benefit situation clear on this one? Furthermore wouldn't there be a way to allow core dumps only for user-specified or user-granted programs?Or am I missing something here?
Why are core dumps enabled by default in Debian?
debian;security;core dump