Skip to content

Systemd: changed value of kernel.yama.ptrace_scope to 0#111

Closed
Jkintalix wants to merge 1 commit intoopen-edge-platform:3.0-devfrom
Jkintalix:systemd-ptrace
Closed

Systemd: changed value of kernel.yama.ptrace_scope to 0#111
Jkintalix wants to merge 1 commit intoopen-edge-platform:3.0-devfrom
Jkintalix:systemd-ptrace

Conversation

@Jkintalix
Copy link
Copy Markdown
Contributor

  • Updated 99-yama-ptrace.conf to set kernel.yama.ptrace_scope = 0
  • Updated systemd.signatures.json with new hash for the .conf file
  • Added the changelog entry and bumped release in systemd.spec
  • This setting disables ptrace restrictions. Any process can trace any other. Useful for development and debugging. Use 'sysctl kernel.yama.ptrace_scope' to check the current setting.

Merge Checklist

All boxes should be checked before merging the PR

  • The changes in the PR have been built and tested
  • [] cgmanifest file has been updated if required
  • Ready to merge

Description

updated the value kernel.yama.ptrace_scope to zero to disable to any ptrace restrictions.

Any Newly Introduced Dependencies

No

How Has This Been Tested?

First systemd rpm has built with modified systemd spec file.
With above systemd binaries, created iso and installed on system. verified as below.

image

@Jkintalix Jkintalix requested a review from a team as a code owner May 20, 2025 12:50
@Jkintalix Jkintalix requested a review from a team as a code owner May 22, 2025 20:14
@Jkintalix Jkintalix force-pushed the systemd-ptrace branch 5 times, most recently from d506697 to 0fef9ea Compare May 23, 2025 17:08
- Updated 99-yama-ptrace.conf to set kernel.yama.ptrace_scope = 0
- Updated systemd.signatures.json with new hash for the .conf file
- Added the changelog entry and bumped release in systemd.spec
- This setting disables ptrace restrictions. Any process can trace any other.
    Useful for development and debugging. Use 'sysctl kernel.yama.ptrace_scope'
    to check the current setting

Signed-off-by: kinatli jayanth <jayanthx.kintali@intel.com>
@cheeyanglee
Copy link
Copy Markdown
Contributor

This is changing the default behavior for all. i don't think this would be ideal to be default.

@anujm1 anujm1 closed this May 28, 2025
ssinghax pushed a commit to ssinghax/edge-microvisor-toolkit that referenced this pull request Feb 6, 2026
Signed-off-by: Rajeev Ranjan <rajeev2.ranjan@intel.com>
Reviewed-by: Aaron Chan <aaron.chun.yew.chan@intel.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants