Re: [PATCH] Add 10-yama-ptrace.conf (rhbz 1209492)

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi,

Added systemd-maint to the CC.

On Tue, 2015-06-23 at 09:11 -0400, Josh Boyer wrote:
> On Tue, Jun 23, 2015 at 9:09 AM, Mark Wielaard <mjw@xxxxxxxxxx> wrote:
> >> > diff --git a/kernel.spec b/kernel.spec
> >> > index dfc4500..87efd85 100644
> >> > --- a/kernel.spec
> >> > +++ b/kernel.spec
> >> > @@ -460,6 +460,9 @@ Source1000: config-local
> >> >  Source2000: cpupower.service
> >> >  Source2001: cpupower.config
> >> >
> >> > +# Default sysctl files
> >> > +Source3000: 10-yama-ptrace.conf
> >>
> >> We don't ship any other sysctl files in the kernel package.
> >
> > But we do ship other service and config files. Which is what this patch
> > modeled after. The alternative fix for the kernel is to just disable
> > yama completely. But then the admin cannot add any more yama based
> > restrictions at all if they wanted.
> 
> I suggested submitting this to the systemd package to sit with all the
> rest of the sysctl options we ship in the distro.  I wasn't saying
> don't ship it.  I was saying keep it with everything else.

OK. I made a patch for the systemd package and attached it to a new bug:
https://bugzilla.redhat.com/show_bug.cgi?id=1234951
Once that patch is applied to the f22 systemd package the kernel package
should probably depend on the version in which it is fixed.

Thanks,

Mark
_______________________________________________
kernel mailing list
kernel@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/kernel




[Index of Archives]     [Fedora General Discussion]     [Older Fedora Users Archive]     [Fedora Advisory Board]     [Fedora Security]     [Fedora Devel Java]     [Fedora Legacy]     [Fedora Desktop]     [ATA RAID]     [Fedora Marketing]     [Fedora Mentors]     [Fedora Package Announce]     [Fedora Package Review]     [Fedora Music]     [Fedora Packaging]     [Centos]     [Fedora SELinux]     [Coolkey]     [Yum Users]     [Tux]     [Yosemite News]     [KDE Users]     [Fedora Art]     [Fedora Docs]     [USB]     [Asterisk PBX]

  Powered by Linux