On a newly installed Red Hat system, by default no core files are generated for crashed processes. To enable core files, make the following changes (as user root):

Red Hat 9

Configure the corefile size limit in the following file:

/etc/systemd/system.conf

Add or uncomment the following line and change it to “infinity” (defaults to “0:infinity”):

DefaultLimitCORE=infinity

Activate the new setting in the running kernel:

systemctl daemon-reexec

Red Hat 7/8

Configure the corefile size limit in the following file:

/etc/systemd/system.conf

Add or uncomment the following line:

DefaultLimitCORE=infinity

Add the core file pattern tunable:

/etc/sysctl.conf

kernel.core_uses_pid = 0
kernel.core_pattern = core.%E.core

Activate the core file pattern in the running kernel:

sysctl -p /etc/sysctl.conf

systemctl daemon-reexec

Verification

Restart httpd (and SKOOR Engine services, if they are already installed), then logout and login again. To test creation of core files run a kill command on the PID of the collector process:

kill -SEGV <PID>

Red Hat 9

This should create a collector core file. List available corefiles with coredumpctl:

coredumpctl

TIME                            PID UID  GID SIG     COREFILE EXE                                SIZE
Fri 2023-11-24 11:04:09 CET 1475052 989 1001 SIGSEGV present  /opt/eranger/bin/eranger-collector 1.3M

Red Hat 7/8

This should create collector core file:

ls /var/opt/run/eranger/collector/core*

core.!opt!eranger!bin!eranger-collector.core