The following is /etc/sysctl.conf: kernel.core_pattern=core-%e-%p-%t .
However, z1090instcheck shows 10. REDHAT kernel.core_pattern is |/usr/libexec/abrt-hook-ccpp which is BAD

I presume z1090instcheck reads from sysctl.conf. Ideas on why it is seeing that BAD pattern?

Thanks!

Wilbert,
Did you reboot after making the updates as follows?

1. gedit /etc/sysctl.conf (the following lines should begin in column 1)

kernel.shmmax=18000000000
kernel.core_pattern=core-%e-%p-%t
kernel.core_uses_pid=1
kernel.msgmni=512
kernel.msgmax=65536
kernel.msgmnb=65536
net.core.rmem_max=1048576
net.core.rmem_default=1048576

1. /sbin/sysctl -p /etc/sysctl.conf

You must shutdown and reboot after making the changes, and before running z1090instcheck.

RDzJohn

Per the client, yes, the lines started in column 1 and the system was rebooted.

Thanks!

after running (as root) /sbin/sysctl -p /etc/sysctl.conf
the system should reflect the changes immediately. if you then run

/sbin/sysctl -a |grep pattern

Then you should see

kernel.core_pattern = core-%e-%p-%t

If that changes during a reboot then some other process in the reboot is making changes.
(z1090instcheck should also show the change immediately after /sbin/sysctl -p)