Comment 9 for bug 636278

Revision history for this message
In , Kees Cook (kees) wrote :

Ubuntu has added prctl(PR_SET_PTRACER, debugger_pid, 0, 0, 0); as the way to declare PTRACE relationships for crash handlers (or wardens). For an example, see how kdelibs was patched:

http://launchpadlibrarian.net/51487035/kde4libs_4%3A4.4.90-0ubuntu2_4%3A4.4.90-0ubuntu3.diff.gz

It should be possible for a process to specify which process families are allowed to PTRACE it.