Re: SELinuxDenyPtrace: Write, compile, run, but don't debug applications?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Mon, Apr 09, 2012 at 09:38:40AM -0400, Eric Paris wrote:
> (Think about it a moment.  gdb -p is the same as firefox trying to
> ptrace gnome-keyring)

I thought a bit about it. And now I am even more confused :)

It seems you are already not allowed to ptrace gnome-keyring-daemon
(or ssh-agent because that is setuid). So is there a better example
than gnome-keyring or ssh-agent to show why we would like to clobber
ptrace globally?

Thanks,

Mark
-- 
devel mailing list
devel@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/devel



[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Index of Archives]     [Fedora Announce]     [Fedora Kernel]     [Fedora Testing]     [Fedora Formulas]     [Fedora PHP Devel]     [Kernel Development]     [Fedora Legacy]     [Fedora Maintainers]     [Fedora Desktop]     [PAM]     [Red Hat Development]     [Gimp]     [Yosemite News]
  Powered by Linux