SELinuxDenyPtrace: Write, compile, run, but don't debug applications?

Miloslav Trmač mitr at volny.cz
Tue Apr 10 09:57:12 UTC 2012


On Tue, Apr 10, 2012 at 4:27 AM, Kevin Kofler <kevin.kofler at chello.at> wrote:
>> I could turn it off for Fedora 17 final and on in Rawhide to find other
>> problems with the feature.
>
> Uh no, if the answer is you should turn it off, this means you should turn
> it off and keep it off.

Well, FESCo never discussed having deny_ptrace on by default, so it
also did not decide that it shouldn't be on by default.
   Mirek


More information about the devel mailing list