On Fri, 31 Aug 2012, Kees Cook wrote: > Given that several distros use (or want to use) Yama, I think that's > reason enough for this. I think it's important for us to take a > practical approach here, and having the big LSMs each hook Yama instead > of doing this in a single global place will make it needlessly > duplicated code.
With my SUSE hat on, I would be really reluctant to enable config option in the distribution kernel that will make attaching gdb to running processess impossible without any further tuning (like sysctl/procfs knob to explicitly enable this feature). Thanks, -- Jiri Kosina SUSE Labs -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majord...@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
