FileMgr

✏️ /etc/sysctl.d/10-ptrace.conf

✕ Tutup

# The PTRACE system is used for debugging.  With it, a single user process
# can attach to any other dumpable process owned by the same user.  In the
# case of malicious software, it is possible to use PTRACE to access
# credentials that exist in memory (re-using existing SSH connections,
# extracting GPG agent information, etc).
#
# A PTRACE scope of "0" is the more permissive mode.  A scope of "1" limits
# PTRACE only to direct child processes (e.g. "gdb name-of-program" and
# "strace -f name-of-program" work, but gdb's "attach" and "strace -fp $PID"
# do not).  The PTRACE scope is ignored when a user has CAP_SYS_PTRACE, so
# "sudo strace -fp $PID" will work as before.  For more details see:
# https://wiki.ubuntu.com/SecurityTeam/Roadmap/KernelHardening#ptrace
#
# For applications launching crash handlers that need PTRACE, exceptions can
# be registered by the debugee by declaring in the segfault handler
# specifically which process will be using PTRACE on the debugee:
#   prctl(PR_SET_PTRACER, debugger_pid, 0, 0, 0);
#
# In general, PTRACE is not needed for the average running Ubuntu system.
# To that end, the default is to set the PTRACE scope to "1".  This value
# may not be appropriate for developers or servers with only admin accounts.
kernel.yama.ptrace_scope = 1

Batal

⬅ etc 12 item

Nama	Tipe	Ukuran	Diubah	Perm	Aksi
📄 10-bufferbloat.conf	conf	481 B	26/09/24 08:44	0644	✏️ ⬇
📄 10-console-messages.conf	conf	77 B	31/03/24 08:16	0644	✏️ ⬇
📄 10-ipv6-privacy.conf	conf	490 B	31/03/24 08:16	0644	✏️ ⬇
📄 10-kernel-hardening.conf	conf	1.2 KB	31/03/24 08:16	0644	✏️ ⬇
📄 10-magic-sysrq.conf	conf	1.2 KB	31/03/24 08:16	0644	✏️ ⬇
📄 10-map-count.conf	conf	164 B	31/03/24 08:16	0644	✏️ ⬇
📄 10-network-security.conf	conf	158 B	31/03/24 08:16	0644	✏️ ⬇
📄 10-ptrace.conf	conf	1.3 KB	31/03/24 08:16	0644	✏️ ⬇
📄 10-zeropage.conf	conf	506 B	31/03/24 08:16	0644	✏️ ⬇
📄 99-cloudimg-ipv6.conf	conf	185 B	15/06/26 13:46	0644	✏️ ⬇
📄 99-sysctl.conf	conf	2.2 KB	24/03/24 15:35	0644	✏️ ⬇
📄 README.sysctl	sysctl	798 B	24/03/24 15:35	0644	✏️ ⬇

✏️ Rename

🔑 Ubah Permission