restrict ptrace in dpup

vanilla-dpup · Feb 16, 2023 · b44a587 · b44a587
1 parent 7c048f4
commit b44a587
Show file tree

Hide file tree

Showing 3 changed files with 3 additions and 0 deletions.
diff --git a/woof-distro/x86_64/debian/bookworm64/_00build.conf b/woof-distro/x86_64/debian/bookworm64/_00build.conf
@@ -167,6 +167,7 @@ rm -f usr/bin/weechat-headless
 rm -f etc/localtime
 ln -s /usr/share/zoneinfo/Etc/GMT-0 etc/localtime
 sed -i \"s/exec ppm/exec synaptic/\" usr/local/bin/missingdefaultapp
+echo \"kernel.yama.ptrace_scope = 1\" > etc/sysctl.d/10-ptrace.conf
 [ \"\$DISTRO_VARIANT\" = \"dwl\" ] && rm -f etc/xdg/autostart/blueman.desktop
 [ \"\$DISTRO_VARIANT\" = \"dwl\" -o \"\$DISTRO_VARIANT\" = \"xwayland\" ] && rm -f etc/xdg/autostart/xinput-apply.desktop etc/xdg/autostart/xkb-apply.desktop etc/xdg/autostart/xorg-mousekeys.desktop
 "
diff --git a/woof-distro/x86_64/debian/bullseye64/_00build.conf b/woof-distro/x86_64/debian/bullseye64/_00build.conf
@@ -152,4 +152,5 @@ rm -f usr/bin/weechat-headless
 rm -f etc/localtime
 ln -s /usr/share/zoneinfo/Etc/GMT-0 etc/localtime
 sed -i \"s/exec ppm/exec synaptic/\" usr/local/bin/missingdefaultapp
+echo \"kernel.yama.ptrace_scope = 1\" > etc/sysctl.d/10-ptrace.conf
 "
diff --git a/woof-distro/x86_64/debian/sid64/_00build.conf b/woof-distro/x86_64/debian/sid64/_00build.conf
@@ -152,5 +152,6 @@ rm -f usr/bin/weechat-headless
 rm -f etc/localtime
 ln -s /usr/share/zoneinfo/Etc/GMT-0 etc/localtime
 sed -i \"s/exec ppm/exec synaptic/\" usr/local/bin/missingdefaultapp
+echo \"kernel.yama.ptrace_scope = 1\" > etc/sysctl.d/10-ptrace.conf
 rm -f etc/xdg/autostart/blueman.desktop etc/xdg/autostart/pcmanfm.desktop etc/xdg/autostart/pcmanfm.desktop etc/xdg/autostart/xinput-apply.desktop etc/xdg/autostart/xkb-apply.desktop etc/xdg/autostart/xorg-mousekeys.desktop
 "