mirror of
https://gitlab.torproject.org/tpo/core/tor.git
synced 2024-12-06 19:41:15 +01:00
Jacob Appelbaum
f79a75f597
If set to 1, Tor will attempt to prevent basic debugging attachment attempts by other processes. (Default: 1) Supports Mac OS X and Gnu/Linux. Sebastian provided useful feedback and refactoring suggestions. Signed-off-by: Jacob Appelbaum <jacob@appelbaum.net>
15 lines
936 B
Plaintext
15 lines
936 B
Plaintext
o Minor features:
|
|
- If set to 1, Tor will attempt to prevent basic debugging attachment
|
|
attempts by other processes. It has no impact for users who wish to
|
|
attach if they have CAP_SYS_PTRACE or if they are root. We believe that
|
|
this feature works on modern Gnu/Linux distributions, and that it may
|
|
also work on *BSD systems (untested). Some modern Gnu/Linux systems such
|
|
as Ubuntu have the kernel.yama.ptrace_scope sysctl and by default enable
|
|
it as an attempt to limit the PTRACE scope for all user processes by
|
|
default. This feature will attempt to limit the PTRACE scope for Tor
|
|
specifically - it will not attempt to alter the system wide ptrace scope
|
|
as it may not even exist. If you wish to attach to Tor with a debugger
|
|
such as gdb or strace you will want to set this to 0 for the duration of
|
|
your debugging. Normal users should leave it on. (Default: 1)
|
|
|