Bug 1250178 - Review Request: yama-config-disable-ptrace - Disable Yama ptrace restrictions at boot
Summary: Review Request: yama-config-disable-ptrace - Disable Yama ptrace restrictions...
Keywords:
Status: CLOSED NOTABUG
Alias: None
Product: Fedora
Classification: Fedora
Component: Package Review
Version: rawhide
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Nobody's working on this, feel free to take it
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
: 1250179 (view as bug list)
Depends On:
Blocks: FE-DEADREVIEW 1209492
TreeView+ depends on / blocked
 
Reported: 2015-08-04 16:31 UTC by Paul Moore
Modified: 2020-07-11 00:45 UTC (History)
3 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2020-07-11 00:45:42 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)

Description Paul Moore 2015-08-04 16:31:10 UTC
Spec URL: https://people.redhat.com/~pmoore/review/yama-config-disable-ptrace/yama-config-disable-ptrace.spec
SRPM URL: https://people.redhat.com/~pmoore/review/yama-config-disable-ptrace/yama-config-disable-ptrace-1-0.fc24.src.rpm
Description: Disable Yama ptrace restrictions at boot
Fedora Account System Username: pmoore

Please see RHBZ #1209492 for the detailed motivation behind this new package.

Now that we can enable multiple LSMs in one kernel, there is a strong desire to enable Yama in Fedora kernels.  Unfortunately, some users have complained about the new ptrace restrictions that Yama imposes by default.  This package aims to resolve these issues by shipping a sysctl file which sets the Yama ptrace restriction to the traditional Linux ptrace behavior; the idea is that packages which might require the unrestricted ptrace behavior, e.g. gdb, can create a dependency on this package and the sysctl setting will be set automatically.

Comment 1 Paul Moore 2015-08-13 19:28:51 UTC
Minor mistake, my Fedora Account System username is "pcmoore" not "pmoore"; my apologies for the confusion.

I currently maintain the libseccomp and netlabel_tools packages in Fedora.

Comment 2 Paul Moore 2017-05-25 13:26:38 UTC
*** Bug 1250179 has been marked as a duplicate of this bug. ***

Comment 3 Artur Frenszek-Iwicki 2017-05-26 09:12:27 UTC
I am not a packager, so this is not an official review.

> Release: 0%{?dist}
The release tag should start with 1, not 0.
https://fedoraproject.org/wiki/Packaging:Versioning#Simple_versioning

> cp -p %{SOURCE1} .
> install -D -m 0644 ...
The install command lacks the -p switch.

> License: GPLv2
Licence file doesn't appear in the sources and is not included in the %files section.

Comment 4 Package Review 2020-07-11 00:45:42 UTC
This is an automatic action taken by review-stats script.

The submitter account doesn't exist anymore, therefore this ticket will be closed.


Note You need to log in before you can comment on or make changes to this bug.