Messages in this thread | | | Date | Sun, 2 Sep 2012 09:37:40 +0200 (CEST) | From | Jiri Kosina <> | Subject | Re: [PATCH] security: unconditionally call Yama |
| |
On Fri, 31 Aug 2012, Kees Cook wrote:
> Given that several distros use (or want to use) Yama, I think that's > reason enough for this. I think it's important for us to take a > practical approach here, and having the big LSMs each hook Yama instead > of doing this in a single global place will make it needlessly > duplicated code.
With my SUSE hat on, I would be really reluctant to enable config option in the distribution kernel that will make attaching gdb to running processess impossible without any further tuning (like sysctl/procfs knob to explicitly enable this feature).
Thanks,
-- Jiri Kosina SUSE Labs
| |