From a2e8b9ca5de980419d6eb2fc0fdf9671f0d2b6ab Mon Sep 17 00:00:00 2001 From: Dan Walsh Date: Tue, 24 Jan 2012 09:30:07 -0500 Subject: [PATCH] Turn on deny_ptrace boolean for the Rawhide run, so we can test this out --- booleans-mls.conf | 3 +++ booleans-targeted.conf | 4 +++- 2 files changed, 6 insertions(+), 1 deletion(-) diff --git a/booleans-mls.conf b/booleans-mls.conf index c264bb2d..fb86f905 100644 --- a/booleans-mls.conf +++ b/booleans-mls.conf @@ -1,3 +1,6 @@ +# Turn off the ability for one process to read/modify another processes memory +deny_ptrace = true + # Allow making anonymous memory executable, e.g.for runtime-code generation or executable stack. # allow_execmem = false diff --git a/booleans-targeted.conf b/booleans-targeted.conf index 2f5bc2e9..071bc80a 100644 --- a/booleans-targeted.conf +++ b/booleans-targeted.conf @@ -1,5 +1,7 @@ +# Turn off the ability for one process to read/modify another processes memory +deny_ptrace = true + # Allow making anonymous memory executable, e.g.for runtime-code generation or executable stack. -# deny_execmem = false allow_execmem = true