diff options
| author | Kees Cook <keescook@chromium.org> | 2011-12-21 12:17:04 -0800 |
|---|---|---|
| committer | James Morris <jmorris@namei.org> | 2012-02-10 09:18:52 +1100 |
| commit | 2d514487faf188938a4ee4fb3464eeecfbdcf8eb (patch) | |
| tree | 42147f0459ab062375f63891943242e3b95797bb /include | |
| parent | 1a2a4d06e1e95260c470ebe3a945f61bbe8c1fd8 (diff) | |
security: Yama LSM
This adds the Yama Linux Security Module to collect DAC security
improvements (specifically just ptrace restrictions for now) that have
existed in various forms over the years and have been carried outside the
mainline kernel by other Linux distributions like Openwall and grsecurity.
Signed-off-by: Kees Cook <keescook@chromium.org>
Acked-by: John Johansen <john.johansen@canonical.com>
Signed-off-by: James Morris <jmorris@namei.org>
Diffstat (limited to 'include')
| -rw-r--r-- | include/linux/prctl.h | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/include/linux/prctl.h b/include/linux/prctl.h index 7ddc7f1b480..4d0e5bc5458 100644 --- a/include/linux/prctl.h +++ b/include/linux/prctl.h @@ -114,4 +114,10 @@ # define PR_SET_MM_START_BRK 6 # define PR_SET_MM_BRK 7 +/* + * Set specific pid that is allowed to ptrace the current task. + * A value of 0 mean "no process". + */ +#define PR_SET_PTRACER 0x59616d61 + #endif /* _LINUX_PRCTL_H */ |