Commit 31527da5 authored by Yves-Alexis Perez's avatar Yves-Alexis Perez Committed by Jonathan Corbet

yama: clarify ptrace_scope=2 in Yama documentation

Current phrasing is ambiguous since it's unclear if attaching to a
children through PTRACE_TRACEME requires CAP_SYS_PTRACE. Rephrase the
sentence to make that clear.
Signed-off-by: default avatarYves-Alexis Perez <corsac@corsac.net>
Acked-by: default avatarKees Cook <keescook@chromium.org>
Signed-off-by: default avatarJonathan Corbet <corbet@lwn.net>
parent 98cee674
...@@ -64,8 +64,8 @@ The sysctl settings (writable only with ``CAP_SYS_PTRACE``) are: ...@@ -64,8 +64,8 @@ The sysctl settings (writable only with ``CAP_SYS_PTRACE``) are:
Using ``PTRACE_TRACEME`` is unchanged. Using ``PTRACE_TRACEME`` is unchanged.
2 - admin-only attach: 2 - admin-only attach:
only processes with ``CAP_SYS_PTRACE`` may use ptrace only processes with ``CAP_SYS_PTRACE`` may use ptrace, either with
with ``PTRACE_ATTACH``, or through children calling ``PTRACE_TRACEME``. ``PTRACE_ATTACH`` or through children calling ``PTRACE_TRACEME``.
3 - no attach: 3 - no attach:
no processes may use ptrace with ``PTRACE_ATTACH`` nor via no processes may use ptrace with ``PTRACE_ATTACH`` nor via
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment