3 ms·
You don’t need SYS_PTRACE to really do this? Or is it only observability for the network alone?
by prpl 4y ago
You don’t need SYS_PTRACE to really do this? Or is it only observability for the network alone?
- markgritter 4y agoRight now it's only based on network packet capture, not tracing the application itself. For packet capture we need CAP_NET_RAW, not SYS_PTRACE.