Hi Jan,

On Fri, Sep 12, 2025 at 06:30:59PM +0200, Jan Drögehoff wrote:
> Some addititional info and bugzilla links to read up on prior history:
> - the upstream kernel believes that having it on by default is best
> - the fedora kernel maintainers at the time (2015) did not want to
> maintain a patch
> - turning off yama was also rejected
> - the elfutils package added the config as a bugfix with no change
> proposal or fesco approval I could find despite having system-wide
> ramifications

All true, but done under time pressure because at the time the broken
kernel config had already shipped (or was about to). The kernel
doesn't normally post change proposals (even if they change a config
like here that breaks user space). And the kernel does major rebases
across distro versions. Ideally if there had been time this was
changed upstream or with a proper kernel or systemd config. The
current solution just returns the status quo, unbreaking user
space. And is also what is done by elfutils upstream and in other
distros. I don't think anybody did anything to deliberately break
packages or avoid change proposal processes.

> Some personal thoughts:
> - Other distros already default to the ptrace protection to 1 and
> seem to work without any well known problems, what would break on
> Fedora? (besides arbitrary debugging setups which I consider to be
> invalid arguments)

Probably depends on the target audience, both other distros I use
besides Fedora, Debian and Alma seem to default to the same setup.

> - tools like gdb or strace are most often than not used on child
> processes that the tool itself spawned

I believe a lot of people run tools like strace, pstack or eu-stack to
quickly see where and how their own (already running) processes are
stuck. At least I do.

Cheers,

Mark
-- 
_______________________________________________
devel mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Reply via email to