Re: forbid to strace a program

2005-09-05 Thread Bernd Petrovitsch
On Sun, 2005-09-04 at 09:32 +0200, Andreas Hartmann wrote: > Chase Venters wrote: [...] > > > > Can I ask why you want to hide the database password from root? > > It's easy: for security reasons. There could always be some bugs in some > software, which makes it possible for some other user, to

Re: forbid to strace a program

2005-09-05 Thread Bernd Petrovitsch
On Sun, 2005-09-04 at 09:32 +0200, Andreas Hartmann wrote: Chase Venters wrote: [...] Can I ask why you want to hide the database password from root? It's easy: for security reasons. There could always be some bugs in some software, which makes it possible for some other user, to gain

Re: forbid to strace a program

2005-09-04 Thread Horst von Brand
Andreas Hartmann <[EMAIL PROTECTED]> wrote: 1> Alex Riesen wrote: > > On 9/3/05, Andreas Hartmann <[EMAIL PROTECTED]> wrote: > >> Hello! > >> Is it possible to prevent a program to be straced on x86? > >> What do I have to do, eg., to prevent a perl-program to be straced? Look at the contortions

Re: forbid to strace a program

2005-09-04 Thread Tejun Heo
On Sun, Sep 04, 2005 at 09:32:34AM +0200, Andreas Hartmann wrote: > Chase Venters wrote: > >> Is there another way to do this? If the password is crypted, I need a > >> passphrase or something other to decrypt it again. Not really a solution > >> of the problem. > >> > >> Therefore, it would be

Re: forbid to strace a program

2005-09-04 Thread Willy Tarreau
Hi Andreas, On Sun, Sep 04, 2005 at 09:32:34AM +0200, Andreas Hartmann wrote: > > Can I ask why you want to hide the database password from root? > > It's easy: for security reasons. There could always be some bugs in some > software, which makes it possible for some other user, to gain root >

Re: forbid to strace a program

2005-09-04 Thread Andreas Hartmann
Chase Venters wrote: >> Is there another way to do this? If the password is crypted, I need a >> passphrase or something other to decrypt it again. Not really a solution >> of the problem. >> >> Therefore, it would be best, to hide it by preventing stracing of the >> application to all users and

Re: forbid to strace a program

2005-09-04 Thread Andreas Hartmann
Chase Venters wrote: Is there another way to do this? If the password is crypted, I need a passphrase or something other to decrypt it again. Not really a solution of the problem. Therefore, it would be best, to hide it by preventing stracing of the application to all users and root. Ok,

Re: forbid to strace a program

2005-09-04 Thread Willy Tarreau
Hi Andreas, On Sun, Sep 04, 2005 at 09:32:34AM +0200, Andreas Hartmann wrote: Can I ask why you want to hide the database password from root? It's easy: for security reasons. There could always be some bugs in some software, which makes it possible for some other user, to gain root

Re: forbid to strace a program

2005-09-04 Thread Tejun Heo
On Sun, Sep 04, 2005 at 09:32:34AM +0200, Andreas Hartmann wrote: Chase Venters wrote: Is there another way to do this? If the password is crypted, I need a passphrase or something other to decrypt it again. Not really a solution of the problem. Therefore, it would be best, to hide it

Re: forbid to strace a program

2005-09-04 Thread Horst von Brand
Andreas Hartmann [EMAIL PROTECTED] wrote: 1 Alex Riesen wrote: On 9/3/05, Andreas Hartmann [EMAIL PROTECTED] wrote: Hello! Is it possible to prevent a program to be straced on x86? What do I have to do, eg., to prevent a perl-program to be straced? Look at the contortions shc does for

Re: forbid to strace a program

2005-09-03 Thread Chase Venters
> Is there another way to do this? If the password is crypted, I need a > passphrase or something other to decrypt it again. Not really a solution > of the problem. > > Therefore, it would be best, to hide it by preventing stracing of the > application to all users and root. > > Ok, root could

Re: forbid to strace a program

2005-09-03 Thread Andreas Hartmann
Alex Riesen wrote: > On 9/3/05, Andreas Hartmann <[EMAIL PROTECTED]> wrote: >> Hello! >> >> Is it possible to prevent a program to be straced on x86? >> What do I have to do, eg., to prevent a perl-program to be straced? >> > > So that none can see what are you doing? Or because your program is

Re: forbid to strace a program

2005-09-03 Thread Alex Riesen
On 9/3/05, Andreas Hartmann <[EMAIL PROTECTED]> wrote: > Hello! > > Is it possible to prevent a program to be straced on x86? > What do I have to do, eg., to prevent a perl-program to be straced? > So that none can see what are you doing? Or because your program is breaking because of this?

Re: forbid to strace a program

2005-09-03 Thread Alex Riesen
On 9/3/05, Andreas Hartmann [EMAIL PROTECTED] wrote: Hello! Is it possible to prevent a program to be straced on x86? What do I have to do, eg., to prevent a perl-program to be straced? So that none can see what are you doing? Or because your program is breaking because of this? Probably

Re: forbid to strace a program

2005-09-03 Thread Andreas Hartmann
Alex Riesen wrote: On 9/3/05, Andreas Hartmann [EMAIL PROTECTED] wrote: Hello! Is it possible to prevent a program to be straced on x86? What do I have to do, eg., to prevent a perl-program to be straced? So that none can see what are you doing? Or because your program is breaking

Re: forbid to strace a program

2005-09-03 Thread Chase Venters
Is there another way to do this? If the password is crypted, I need a passphrase or something other to decrypt it again. Not really a solution of the problem. Therefore, it would be best, to hide it by preventing stracing of the application to all users and root. Ok, root could search for