redonkable
/
alistair23-linux
1
0
Fork 0
Code Releases Activity

yama: clarify ptrace_scope=2 in Yama documentation 

Current phrasing is ambiguous since it's unclear if attaching to a
children through PTRACE_TRACEME requires CAP_SYS_PTRACE. Rephrase the
sentence to make that clear.

Signed-off-by: Yves-Alexis Perez <corsac@corsac.net>
Acked-by: Kees Cook <keescook@chromium.org>
Signed-off-by: Jonathan Corbet <corbet@lwn.net>
hifive-unleashed-5.1
Yves-Alexis Perez 2018-10-02 22:47:23 +02:00 committed by Jonathan Corbet
parent 98cee6742c
commit 31527da5d6
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
Documentation/admin-guide/LSM/Yama.rst
View File

@ -64,8 +64,8 @@ The sysctl settings (writable only with ``CAP_SYS_PTRACE``) are:
Using ``PTRACE_TRACEME`` is unchanged. Using ``PTRACE_TRACEME`` is unchanged.
2 - admin-only attach: 2 - admin-only attach:
only processes with ``CAP_SYS_PTRACE`` may use ptrace only processes with ``CAP_SYS_PTRACE`` may use ptrace, either with
with ``PTRACE_ATTACH``, or through children calling ``PTRACE_TRACEME``. ``PTRACE_ATTACH`` or through children calling ``PTRACE_TRACEME``.
3 - no attach: 3 - no attach:
no processes may use ptrace with ``PTRACE_ATTACH`` nor via no processes may use ptrace with ``PTRACE_ATTACH`` nor via