Re: [PATCH] Yama: add PR_SET_PTRACER_ANY

[James Morris]

On Tue, 14 Feb 2012, Kees Cook wrote:

> For a process to entirely disable Yama ptrace restrictions, it can use
> the special PR_SET_PTRACER_ANY pid to indicate that any otherwise allowed
> process may ptrace it. This is stronger than calling PR_SET_PTRACER with
> pid "1" because it includes processes in external pid namespaces. This is
> currently needed by the Chrome renderer, since its crash handler (Breakpad)
> runs external to the renderer's pid namespace.
> 
> Signed-off-by: Kees Cook <keescook@xxxxxxxxxxxx>

Applied to
git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security.git next

-- 
James Morris
<jmorris@xxxxxxxxx>
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/