[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-ID: <alpine.LRH.2.02.1202161031260.30179@tundra.namei.org>
Date: Thu, 16 Feb 2012 10:41:01 +1100 (EST)
From: James Morris <jmorris@...ei.org>
To: Kees Cook <keescook@...omium.org>
cc: linux-security-module@...r.kernel.org, linux-kernel@...r.kernel.org,
John Johansen <john.johansen@...onical.com>,
kernel-hardening@...ts.openwall.com
Subject: Re: [PATCH] Yama: add PR_SET_PTRACER_ANY
On Tue, 14 Feb 2012, Kees Cook wrote:
> For a process to entirely disable Yama ptrace restrictions, it can use
> the special PR_SET_PTRACER_ANY pid to indicate that any otherwise allowed
> process may ptrace it. This is stronger than calling PR_SET_PTRACER with
> pid "1" because it includes processes in external pid namespaces. This is
> currently needed by the Chrome renderer, since its crash handler (Breakpad)
> runs external to the renderer's pid namespace.
>
> Signed-off-by: Kees Cook <keescook@...omium.org>
Applied to
git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security.git next
--
James Morris
<jmorris@...ei.org>
Powered by blists - more mailing lists
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
