Re: [suspend] [patch 3/3] attach-fail-reasons: SELinux deny_ptrace

Jan Kratochvil
2012-03-08T16:46:40Z

On Thu, 08 Mar 2012 17:43:35 +0100, Tom Tromey wrote:
> I wonder whether ptrace-hardening approaches other than SELinux still
> have restrictions on PTRACE_TRACEME. If so then you may want a similar
> patch anyhow.

There is a note that YAMA does not restrict PTRACE_TRACEME, like I recommended
for SELinux 'deny_ptrace':
https://bugzilla.redhat.com/show_bug.cgi?id=786878#c17

While it is good to handle errors from system calls I am not sure it is worth
to complicate GDB this way for a case which does not happen in real world.

Regards,
Jan