linux-kernel - Re: Trouble with ptrace self-attach rule since kernel

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-Id: <200609041756.18343.ah2@delair.de>
Date:	Mon, 4 Sep 2006 17:56:17 +0200
From:	Andreas Hobein <ah2@...air.de>
To:	Oleg Nesterov <oleg@...sign.ru>
Cc:	Linus Torvalds <torvalds@...l.org>, Andrew Morton <akpm@...l.org>,
	Linux Kernel Mailing List <linux-kernel@...r.kernel.org>,
	Roland McGrath <roland@...hat.com>,
	Markus Gutschke <markus@...gle.com>
Subject: Re: Trouble with ptrace self-attach rule since kernel > 2.6.14

On Monday 04 September 2006 17:23, you wrote:
> Could you test your application with 2.6.18-rc6 and this change
>
> 	-       if (task == current)
> 	+       if (task->tgid == current->tgid)
>
> reverted? I think any report, positive or negative, would be useful.

In fact I applied exactly this change before posting to this mailing list to 
kernel-2.6.17-1.2174_FC5 (Source rpm from fedora core 5) _without_ success. 
Thats why I thought there were also some other changes with similar effects 
in the kernel source at the same time.

> It would be nice if your test covers different conditions, such as
> 'main thread debugs sub-thread' and vice versa. Exec under ptrace is
> also interesting.

In my application a child thread debugs sibling threads and the parent. 
Neither works for newer kernels.

I will try a 2.6.18-rc6 vanilla kernel with the above patch applied at home 
and give you some feedback wether there is a different result as with the 
patched 2.6.17-1.2174_FC5 kernel.

> It's a pity to disappoint you, but you may be the 3rd :) Found this
> unanswered message:
>
> 	http://marc.theaimsgroup.com/?l=linux-kernel&m=114073955827139

May be there are more advocates of self-debugging than expected ...

	Andreas
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/