Shawn, Following up after a log time having this sit in my queue... Kees Cook (developer of the PR_SET_PTRACER code) eventually sent me a patch for this which I've taken instead of yours, but Kees missed documenting the EINVAL error, and I've taken that piece from you. Thanks! Michael On Mon, Aug 6, 2012 at 8:19 AM, Shawn Landden <shawnlandden@xxxxxxxxx> wrote: > --- > man2/prctl.2 | 29 +++++++++++++++++++++++++++++ > 1 file changed, 29 insertions(+) > > diff --git a/man2/prctl.2 b/man2/prctl.2 > index 7f0ac46..f866f04 100644 > --- a/man2/prctl.2 > +++ b/man2/prctl.2 > @@ -45,6 +45,7 @@ > .\" SECCOMP_MODE_STRICT, SECCOMP_MODE_FILTER > .\" (thx Andy Lutomirski <luto@xxxxxxxxxxxxxx> 259e5e6c) > .\" PR_SET_TIMERSLACK, PR_GET_TIMESLACK, ARM alignment trap handler > +.\" PR_SET_PTRACER > .\" > .TH PRCTL 2 2012-08-03 "Linux" "Linux Programmer's Manual" > .SH NAME > @@ -321,6 +322,18 @@ This operation is only available if the kernel is configured with > .BR CONFIG_SECCOMP > enabled. > .TP > +.BR PR_SET_PTRACER " (since Linux 3.3)" > +When using restricted ptrace, permit process of pid > +.I arg2 > +to ptrace the current task. A value of 0 means "no process", and the special > +value > +.B PR_SET_PTRACER_ANY > +disables restricted ptrace for this process. Restricted ptrace is set via > +.IR /proc/sys/kernel/yama/ptrace_scope > +when the kernel has been configured with > +.B CONFIG_SECURITY_YAMA > +and the yama LSM is active. > +.TP > .BR PR_SET_SECUREBITS " (since Linux 2.6.26)" > Set the "securebits" flags of the calling thread to the value supplied in > .IR arg2 . > @@ -699,6 +712,16 @@ is > .B EINVAL > .I option > is > +.BR PR_SET_PTRACER > +and > +.I arg2 > +is not 0, > +.BR PR_SET_PTRACER_ANY , > +or the pid of an active process. > +.TP > +.B EINVAL > +.I option > +is > .BR PR_SET_MM , > and one of the following is true > .RS > @@ -742,6 +765,12 @@ and > .I arg3 > is not a valid filter program. > .TP > +.B ENOMEM > +.I option > +is > +.BR PR_SET_PTRACER > +and insufficient memory to set up ptrace relation with given pid. > +.TP > .B EPERM > .I option > is > -- > 1.7.9.5 > -- Michael Kerrisk Linux man-pages maintainer; http://www.kernel.org/doc/man-pages/ Author of "The Linux Programming Interface"; http://man7.org/tlpi/ -- To unsubscribe from this list: send the line "unsubscribe linux-man" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
