On Tue, Nov 18, 2025 at 07:36:36AM -0500, Neal Gompa wrote:
> On Tue, Nov 18, 2025 at 4:25 AM Daniel P. Berrangé <[email protected]> 
> wrote:
> >
> > On Tue, Nov 18, 2025 at 08:31:20AM +0100, Vitaly Zaitsev via devel wrote:
> > > On 16/11/2025 12:35, Christopher Klooz wrote:
> > > > It is the successor of an earlier proposal that included
> > > > kernel.yama.ptrace_scope that was withdrawn. Given the wide support of
> > > > ptrace_scope in the first proposal and its (imho) advantages, I wanted
> > > > to re-propose the ptrace_scope-related part of the withdrawn proposal
> > > > early, and in compliance to the suggestions of splitting it from the
> > > > other changes.
> > >
> > > Strong -1. Disabling debug for non-root users is 100% NO-GO for me, as it
> > > will make Fedora unusable for development.
> >
> > It is only changing the default setting. For any given Fedora install it
> > would be a one-time task to change the sysctl back to its current value.
> > IOW, while it is inconvenient for developers on a freshly deployed machine,
> > it is not a blocker that makes Fedora unusable for dev purposes, except
> > for machines where you lack admin access & the admin won't change the
> > setting for you.
> >
> 
> What's the impact for tools like ABRT and DrKonqi? Those do retracing
> as non-root users to collect information to submit crash reports,
> among other things.

Don't those kind of crash handlers tie into the kernel with a pipe from
the registered core_pattern ?  Receiving core dumps via the core pattern
handler wouldn't require PTRACE capability AFAIK, so should be unaffected.


With regards,
Daniel
-- 
|: https://berrange.com      -o-    https://www.flickr.com/photos/dberrange :|
|: https://libvirt.org         -o-            https://fstop138.berrange.com :|
|: https://entangle-photo.org    -o-    https://www.instagram.com/dberrange :|

-- 
_______________________________________________
devel mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Reply via email to