Re: [coLinux-users] Problem with ptrace protection in Ubuntu

[yin s. <sun...@gm...>]

OK, I tried on my debian 6.0.3 (latest colinux kernel), rettyer works.
And I am sure the colinux doesn't have yama. whether have yama or not
may not be your problem.
Since it only provide protection for non root user.
not sure what else could be wrong, sorry can't help you more.

/Yin



On Thu, Feb 2, 2012 at 6:28 PM, yin sun <sun...@gm...> wrote:
> I guess you are right, there is no yama LSM in 2.6.33.7
>
> /Yin
>
> On Tue, Jan 31, 2012 at 8:48 PM, Alexander Kriegisch
> <kri...@fr...> wrote:
>> Hi.
>>
>> I am running andLinux/coLinux:
>>
>> $ uname -a
>> Linux andLinux 2.6.33.7-co-0.7.10-r1588 #1 PREEMPT Mon Aug 8 04:13:31 UTC 2011 i686 athlon i386 GNU/Linux
>>
>> But...
>>
>> $ cat /etc/motd | head -n 1
>> Welcome to Ubuntu 11.10 (GNU/Linux 2.6.33.7-co-0.7.10-r1588 i686)
>>
>> Now the problem is so-called "ptrace protection", explained there:
>> https://wiki.edubuntu.org/SecurityTeam/Roadmap/KernelHardening#ptrace_Protection
>>
>> I tried to use tools like reptyr and injcode:
>> https://github.com/nelhage/reptyr#readme
>> https://github.com/ThomasHabets/injcode#readme
>>
>> Both of them do not work as expected. My suspicion is that this is due to my combination of coLinux kernel (without yama) and new Ubuntu (relying on yama). I tried to run the tools as root (sudo -i) because I expected ptrace protection to be inactive according to the description at Ubuntu, but to no avail.
>>
>> My questions are:
>>  1) Can you confirm that my suscpcion is correct?
>>    2a) If not, what else might be the reason for my problems?
>>    2b) If so, is there anything I can do about it like downloading a coLinux kernel with built-in yama support from somewhere or asking you to build in yama protection in the future?
>>
>> Disclaimer: Maybe I am not asking the right questions. Please note that I am a user, not a kernel hacker.
>>
>> Any help is appreciated. Thanks in advance.
>> --
>> Alexander Kriegisch (kriegaex)
>> http://freetz.org
>>
>>
>>
>>
>> ------------------------------------------------------------------------------
>> Keep Your Developer Skills Current with LearnDevNow!
>> The most comprehensive online learning library for Microsoft developers
>> is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3,
>> Metro Style Apps, more. Free future releases when you subscribe now!
>> http://p.sf.net/sfu/learndevnow-d2d
>> _______________________________________________
>> coLinux-users mailing list
>> coL...@li...
>> https://lists.sourceforge.net/lists/listinfo/colinux-users