4 ms·
Right now it's only based on network packet capture, not tracing the application itself. For packet capture we need CAP_NET_RAW, not SYS_PTRACE.
by markgritter 4y ago
Right now it's only based on network packet capture, not tracing the application itself. For packet capture we need CAP_NET_RAW, not SYS_PTRACE.