Yes, but PTRACE can be disallowed by the process and behaves differently on some kernels, e.g. Ubuntu hardened: https://wiki.ubuntu.com/SecurityTeam/Roadmap/Ke

Yes, but PTRACE can be disallowed by the process and behaves differently on some kernels, e.g. Ubuntu hardened: https://wiki.ubuntu.com/SecurityTeam/Roadmap/KernelHardening#ptrace_Protection https://wiki.ubuntu.com/SecurityTeam/Roadmap/KernelHardening... https://fedoraproject.org/wiki/Features/SELinuxDenyPtrace https://fedoraproject.org/wiki/Features/SELinuxDenyPtrace They usually only allow ptrace from parent to child or as root. Also, wrt debugging, see the comment in the second link: > If you are running a machine and do not plan on debugging the applications on this machine, you should turn this boolean on.