Bug 1250179

Summary:	Review Request: yama-config-disable-ptrace - Disable Yama ptrace restrictions at boot
Product:	[Fedora] Fedora	Reporter:	Paul Moore <pmoore>
Component:	Package Review	Assignee:	Nobody's working on this, feel free to take it <nobody>
Status:	CLOSED DUPLICATE	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	medium	Docs Contact:
Priority:	medium
Version:	rawhide	CC:	fweimer, mcermak, package-review
Target Milestone:	---
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2017-05-25 13:26:38 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	1209492

Description Paul Moore 2015-08-04 16:31:41 UTC

Spec URL: https://people.redhat.com/~pmoore/review/yama-config-disable-ptrace/yama-config-disable-ptrace.spec
SRPM URL: https://people.redhat.com/~pmoore/review/yama-config-disable-ptrace/yama-config-disable-ptrace-1-0.fc24.src.rpm
Description: Disable Yama ptrace restrictions at boot
Fedora Account System Username: pmoore

Please see RHBZ #1209492 for the detailed motivation behind this new package.

Now that we can enable multiple LSMs in one kernel, there is a strong desire to enable Yama in Fedora kernels.  Unfortunately, some users have complained about the new ptrace restrictions that Yama imposes by default.  This package aims to resolve these issues by shipping a sysctl file which sets the Yama ptrace restriction to the traditional Linux ptrace behavior; the idea is that packages which might require the unrestricted ptrace behavior, e.g. gdb, can create a dependency on this package and the sysctl setting will be set automatically.

Comment 1 Paul Moore 2017-05-25 13:26:38 UTC


*** This bug has been marked as a duplicate of bug 1250178 ***