[Ltrace-devel] deny_ptrace SELinux option

Petr Machata pmachata at redhat.com
Tue Apr 10 21:24:12 UTC 2012


Hi there,

I added a new configury flag, HAVE_LIBSELINUX.  I also added a new back
end hook, trace_fail_warning(pid_t), which is called when we fail to
PTRACE_ATTACH or PTRACE_TRACEME.  If we HAVE_LIBSELINUX, this hook
checks value of deny_ptrace SELinux boolean and if it finds it turned
on, it warns the user that they should turn it off.  The code for this
was lifted more or less verbatim from GDB.

Thanks,
PM

P.S. see https://bugzilla.redhat.com/show_bug.cgi?id=810973 for more
information.



More information about the Ltrace-devel mailing list