torproject/tor
1
0
Fork 0
mirror of https://gitlab.torproject.org/tpo/core/tor.git synced 2024-12-06 19:41:15 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity

Merge remote-tracking branch 'ioerror/DisableDebuggerAttachment'

Browse Source 
Conflicts:
	src/or/config.c
This commit is contained in:
Nick Mathewson
2011-11-24 23:38:32 -05:00
parent f634228a07 f79a75f597
commit 68114ca52c
4 changed files with 87 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
changes/disable_debugger_attachment
+14
View File
@@ -0,0 +1,14 @@
o Minor features:
- If set to 1, Tor will attempt to prevent basic debugging attachment
attempts by other processes. It has no impact for users who wish to
attach if they have CAP_SYS_PTRACE or if they are root. We believe that
this feature works on modern Gnu/Linux distributions, and that it may
also work on *BSD systems (untested). Some modern Gnu/Linux systems such
as Ubuntu have the kernel.yama.ptrace_scope sysctl and by default enable
it as an attempt to limit the PTRACE scope for all user processes by
default. This feature will attempt to limit the PTRACE scope for Tor
specifically - it will not attempt to alter the system wide ptrace scope
as it may not even exist. If you wish to attach to Tor with a debugger
such as gdb or strace you will want to set this to 0 for the duration of
your debugging. Normal users should leave it on. (Default: 1)