What is the SUN recommendation for saving core files?

What is the recommended policy for saving core files on JASS hardened and non-hardened Solaris servers? We currently have all servers configured to save all core files in /var/core, only some of the servers are security hardened. What are the security implications, if any, for allowing core files to be created with user access in the directory from which the process that cored started? We want to know if it is practical to change our current configuration. Thanks.

[475 byte] By [Lawson.Sharona] at [2007-11-27 4:08:30]
# 1
We put all core files in /var/core (but I do not have users that can read a core file so this may not help).sysglen
sysglena at 2007-7-12 9:13:51 > top of Java-index,General,Sys Admin Best Practices...
# 2

Since any core file can contain sensitive information, whether you wish to potentially expose that information to people, and to who, is your decision.

I'm assuming you either have people who can work with core files, or have permission to send them offsite to a support vendor. Otherwise, there's not much point in keeping them.

wsandersa at 2007-7-12 9:13:51 > top of Java-index,General,Sys Admin Best Practices...