SELinuxDenyPtrace: Write, compile, run, but don't debug applications?

Kevin Kofler kevin.kofler at
Sun Apr 8 22:31:52 UTC 2012

Mark Wielaard wrote:
> Is there still time to discuss and/or reconsider turning this on by
> default for F17?

+1, this broken misfeature really needs to be turned off by default. It also 
breaks crash reporters such as DrKonqi (for DrKonqi, we work around this by 
disabling the flag in kde-runtime's %post script, but there are other 
similar debuggers in upstream software, some not packaged in Fedora), so the 
claim that it doesn't affect end users is blatantly false.

        Kevin Kofler

More information about the devel mailing list