Or if you have an LSM such as Yama or SELinux set to deny ptrace globally. | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

comex on Oct 30, 2019 | parent | context | favorite | on: Unfork()

Or if you have an LSM such as Yama or SELinux set to deny ptrace globally.

justincormack on Oct 30, 2019 [–]

Yama lets you ptrace a child process but not others.

jwilk on Oct 30, 2019 | [–]

By default, yes.

You can also disable ptrace() completely.

(Grep for "ptrace_scope" in the ptrace(2) man page for details.)

Consider applying for YC's Fall 2026 batch! Applications are open till July 27.
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact