diff --git a/booleans-mls.conf b/booleans-mls.conf index c264bb2d..fb86f905 100644 --- a/booleans-mls.conf +++ b/booleans-mls.conf @@ -1,3 +1,6 @@ +# Turn off the ability for one process to read/modify another processes memory +deny_ptrace = true + # Allow making anonymous memory executable, e.g.for runtime-code generation or executable stack. # allow_execmem = false diff --git a/booleans-targeted.conf b/booleans-targeted.conf index 2f5bc2e9..071bc80a 100644 --- a/booleans-targeted.conf +++ b/booleans-targeted.conf @@ -1,5 +1,7 @@ +# Turn off the ability for one process to read/modify another processes memory +deny_ptrace = true + # Allow making anonymous memory executable, e.g.for runtime-code generation or executable stack. -# deny_execmem = false allow_execmem = true