> This can be stopped by making coredumps to symlinks
> fail unless the link is owned by the owner of the dumping process (or,
> arguably, root).

This is somewhat problematic, in that there is currently no way to
atomically check the permissions *and* traverse a symlink.  Doing so
would require fairly extensive changes to the lookup interface, which
are probably not desirable just to fix this problem.