/var/lib/heartbeat/cores/root/ is in cluster-glue 1.0.12-5.
This file is owned by root:root, with mode 0o755.