Lines Matching +full:user +full:- +full:selectable
5 Yama is a Linux Security Module that collects system-wide DAC security
7 selectable at build-time with ``CONFIG_SECURITY_YAMA``, and can be controlled
8 at run-time through sysctls in ``/proc/sys/kernel/yama``:
15 interfaces is that a single user is able to examine the memory and
20 of their attack without resorting to user-assisted phishing.
23 <https://www.blackhat.com/presentations/bh-usa-05/bh-us-05-boileau.pdf>`_
25 <https://c-skills.blogspot.com/2007/05/injectso.html>`_ attacks already
27 Since ptrace is not commonly used by non-developers and non-admins, system
31 specifically disallow such ptrace attachment (e.g. ssh-agent), but many
34 work), or with ``CAP_SYS_PTRACE`` (i.e. "gdb --pid=PID", and "strace -p PID"
37 In mode 1, software that has defined application-specific relationships
51 0 - classic ptrace permissions:
58 1 - restricted ptrace:
67 2 - admin-only attach:
71 3 - no attach:
75 The original children-only logic was based on the restrictions in grsecurity.