Bug 1250179 - Review Request: yama-config-disable-ptrace - Disable Yama ptrace restrictions at boot
Summary: Review Request: yama-config-disable-ptrace - Disable Yama ptrace restrictions...
Keywords:
Status: CLOSED DUPLICATE of bug 1250178
Alias: None
Product: Fedora
Classification: Fedora
Component: Package Review
Version: rawhide
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Nobody's working on this, feel free to take it
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks: 1209492
TreeView+ depends on / blocked
 
Reported: 2015-08-04 16:31 UTC by Paul Moore
Modified: 2017-05-25 13:33 UTC (History)
3 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2017-05-25 13:26:38 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)

Description Paul Moore 2015-08-04 16:31:41 UTC
Spec URL: https://people.redhat.com/~pmoore/review/yama-config-disable-ptrace/yama-config-disable-ptrace.spec
SRPM URL: https://people.redhat.com/~pmoore/review/yama-config-disable-ptrace/yama-config-disable-ptrace-1-0.fc24.src.rpm
Description: Disable Yama ptrace restrictions at boot
Fedora Account System Username: pmoore

Please see RHBZ #1209492 for the detailed motivation behind this new package.

Now that we can enable multiple LSMs in one kernel, there is a strong desire to enable Yama in Fedora kernels.  Unfortunately, some users have complained about the new ptrace restrictions that Yama imposes by default.  This package aims to resolve these issues by shipping a sysctl file which sets the Yama ptrace restriction to the traditional Linux ptrace behavior; the idea is that packages which might require the unrestricted ptrace behavior, e.g. gdb, can create a dependency on this package and the sysctl setting will be set automatically.

Comment 1 Paul Moore 2017-05-25 13:26:38 UTC

*** This bug has been marked as a duplicate of bug 1250178 ***


Note You need to log in before you can comment on or make changes to this bug.