Messages in this thread | | | Date | Thu, 16 Feb 2012 10:41:01 +1100 (EST) | From | James Morris <> | Subject | Re: [PATCH] Yama: add PR_SET_PTRACER_ANY |
| |
On Tue, 14 Feb 2012, Kees Cook wrote:
> For a process to entirely disable Yama ptrace restrictions, it can use > the special PR_SET_PTRACER_ANY pid to indicate that any otherwise allowed > process may ptrace it. This is stronger than calling PR_SET_PTRACER with > pid "1" because it includes processes in external pid namespaces. This is > currently needed by the Chrome renderer, since its crash handler (Breakpad) > runs external to the renderer's pid namespace. > > Signed-off-by: Kees Cook <keescook@chromium.org>
Applied to git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security.git next
-- James Morris <jmorris@namei.org>
| |