[PATCH roland/libc_fatal-no-syslog] Do not call syslog in __libc_message.

[Russ Allbery]

Roland McGrath <roland@hack.frob.com> writes:

> Other solutions exist for catching crashes in daemons and such.
> This arcane crutch in libc is not the way to solve that problem.

> Any objections?

I cannot tell you how many security compromises I've seen people catch by
noticing sshd or similar segfaults reported in syslog because attackers
are either probing for vulnerabilities or running broken code.  It's hard
to argue with your basic logic, but we've found these notices in syslog
surprisingly valuable for discovering unexpected and unknown security
issues.

-- 
Russ Allbery (rra@stanford.edu)             <http://www.eyrie.org/~eagle/>