Join GitHub today
GitHub is home to over 20 million developers working together to host and review code, manage projects, and build software together.
disable ptrace by default via seccomp to reduce kernel attack surface #318
Comments
thestinger
added
the
Type: enhancement
label
Jun 18, 2016
thestinger
changed the title from
disable ptrace by default via seccomp apps to reduce attack surface
to
disable ptrace by default via seccomp apps to reduce kernel attack surface
Jun 18, 2016
thestinger
changed the title from
disable ptrace by default via seccomp apps to reduce kernel attack surface
to
disable ptrace by default via seccomp to reduce kernel attack surface
Jul 1, 2016
This comment has been minimized.
Show comment
Hide comment
This comment has been minimized.
Show comment Hide comment|
It's now disabled by default for unprivileged users via Yama. |
thestinger
closed this
Sep 21, 2016
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
thestinger commentedJun 18, 2016
•
edited
Edited 1 time
-
thestinger
edited Jun 18, 2016
It should only really be available for debuggable apps, and only when they are actually being debugged.
This might need to wait until Android N for minijail. It would be a bit silly to integrate libseccomp as was done in older versions of CopperheadOS when the functionality is going to be in AOSP already.