Messages in this thread | | | Subject | Re: Review of ptrace Yama ptrace_scope description | From | "Michael Kerrisk (man-pages)" <> | Date | Wed, 29 Jun 2016 06:49:47 +0200 |
| |
Hi Jann, ...
>> So I've made that section of text: >> >> A process that has the CAP_SYS_PTRACE capability can update the >> /proc/sys/kernel/yama/ptrace_scope file with one of the following >> values: >> >> 0 ("classic ptrace permissions") >> No additional restrictions on operations that perform >> PTRACE_MODE_ATTACH checks (beyond those imposed by the com‐ >> moncap and other LSMs). >> >> The use of PTRACE_TRACEME is unchanged. >> >> 1 ("restricted ptrace") [default value] >> When performing an operation that requires a >> PTRACE_MODE_ATTACH check, the calling process must either >> have the CAP_SYS_PTRACE capability in the user namespace of >> the target process or it have a predefined relationship >> with the target process. > > Nit: The grammar in this sentence seems wrong to me. > s/or it have/or it must have/?
Yep, thanks for catching that. Fixed now.
Cheers,
Michael
-- Michael Kerrisk Linux man-pages maintainer; http://www.kernel.org/doc/man-pages/ Linux/UNIX System Programming Training: http://man7.org/training/
| |