3 ms·
> Good to see that the technique is still viable after two decades. It absolutely blew my mind to learn that Debian is still shipping with Yama mitigations dis
by Retr0id 3y ago
> Good to see that the technique is still viable after two decades.
It absolutely blew my mind to learn that Debian is still shipping with Yama mitigations disabled by default (last time I checked, which was about a year ago). I think they're one of the only mainstream distros to be doing this, although I haven't done a comprehensive survey.
- deadlydose 3y agoI think this is so users can choose what level of restriction they want using kernel.yama.ptrace_scope with sysctl, 0 being the default and 2 being the most restrictive.
- Retr0id 3y agoYou can configure it on most distros, it doesn't excuse having an insecure default.
- secure 3y agoThe Debian patch for this setting is: https://salsa.debian.org/kernel-team/linux/-/blob/master/debian/patches/debian/yama-disable-by-default.patch https://salsa.debian.org/kernel-team/linux/-/blob/master/deb... The decision made there is from 2013 (see https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=712740 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=712740), so it might be worth revisiting. Could you file a bug report to get the discussion started?