Bug 1250178

Summary:	Review Request: yama-config-disable-ptrace - Disable Yama ptrace restrictions at boot
Product:	[Fedora] Fedora	Reporter:	Paul Moore <pmoore>
Component:	Package Review	Assignee:	Nobody's working on this, feel free to take it <nobody>
Status:	CLOSED NOTABUG	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	medium	Docs Contact:
Priority:	medium
Version:	rawhide	CC:	fedora, fweimer, package-review
Target Milestone:	---
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2020-07-11 00:45:42 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	201449, 1209492

Description Paul Moore 2015-08-04 16:31:10 UTC

Spec URL: https://people.redhat.com/~pmoore/review/yama-config-disable-ptrace/yama-config-disable-ptrace.spec
SRPM URL: https://people.redhat.com/~pmoore/review/yama-config-disable-ptrace/yama-config-disable-ptrace-1-0.fc24.src.rpm
Description: Disable Yama ptrace restrictions at boot
Fedora Account System Username: pmoore

Please see RHBZ #1209492 for the detailed motivation behind this new package.

Now that we can enable multiple LSMs in one kernel, there is a strong desire to enable Yama in Fedora kernels.  Unfortunately, some users have complained about the new ptrace restrictions that Yama imposes by default.  This package aims to resolve these issues by shipping a sysctl file which sets the Yama ptrace restriction to the traditional Linux ptrace behavior; the idea is that packages which might require the unrestricted ptrace behavior, e.g. gdb, can create a dependency on this package and the sysctl setting will be set automatically.

Comment 1 Paul Moore 2015-08-13 19:28:51 UTC

Minor mistake, my Fedora Account System username is "pcmoore" not "pmoore"; my apologies for the confusion.

I currently maintain the libseccomp and netlabel_tools packages in Fedora.

Comment 2 Paul Moore 2017-05-25 13:26:38 UTC

*** Bug 1250179 has been marked as a duplicate of this bug. ***

Comment 3 Artur Frenszek-Iwicki 2017-05-26 09:12:27 UTC

I am not a packager, so this is not an official review.

> Release: 0%{?dist}
The release tag should start with 1, not 0.
https://fedoraproject.org/wiki/Packaging:Versioning#Simple_versioning

> cp -p %{SOURCE1} .
> install -D -m 0644 ...
The install command lacks the -p switch.

> License: GPLv2
Licence file doesn't appear in the sources and is not included in the %files section.

Comment 4 Package Review 2020-07-11 00:45:42 UTC

This is an automatic action taken by review-stats script.

The submitter account doesn't exist anymore, therefore this ticket will be closed.