SELinuxDenyPtrace: Write, compile, run, but don't debug applications?

[Kevin Kofler]

Daniel J Walsh wrote:
> We already block ptrace from almost every confined domain other then user
> domains.

Then why not just keep it that way instead of breaking GDB?

        Kevin Kofler