On 17/11/2025 18.58, Zbigniew Jędrzejewski-Szmek wrote:
On Mon, Nov 17, 2025 at 05:44:28PM +0000, Christopher Klooz wrote:
"Disable ptrace for unprivileged users by default"
Yes please.
I would stick with the suggestion of Fabio (see the discourse link above), as
this one is not 100% true, even if this is likely to be the practical outcome
in most cases. Keep in mind that child processes will not be affected, even in
unprivileged contexts.
Sure. But a title is not supposed to explain the details.
If the title has a parenthised part, then that's a good sign
that it is too long.
Now submitted as: "Restrict ptrace for unprivileged users to child processes to
match kernel default"
->
https://fedoraproject.org/wiki/Changes/Restrict_ptrace_for_unprivileged_users_to_child_processes_to_match_kernel_default
I tried to align some more suggestions, and removed another paragraph.
Zbyszek
--
_______________________________________________
devel mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam, report it:
https://pagure.io/fedora-infrastructure/new_issue