tcberner created this revision.
tcberner added reviewers: graesslin, rakuco.
tcberner set the repository for this revision to rKSCREENLOCKER KScreenLocker.
Herald added a project: Plasma.
Herald added a subscriber: plasma-devel.
REVISION SUMMARY
Use FreeBSDs `procctl` to disable gdb&Co from attaching to kscreenlocker and
kcheckpass.
What is not so nice is that when CMake runs we get the output:
-- The following features have been enabled:
* procctl-trace , Required for disallow ptrace on greeter and kcheckpass
process
[...]
-- The following features have been disabled:
* prctl-dumpable , Required for disallow ptrace on greeter and kcheckpass
process
This should probably be unified.
Also, as this will probably crop up all over the place, would it maybe be
sensible to define some `enableTracing()` and `disableTracing()` functions so
that this change has not have to be applied everywhere?
TEST PLAN
Testing done:
% gdb --pid <pid of kscreenlocker with --testing>
Result
successfully attached
# gdb --pid <pid of kscreenlocker>
Result
successfully attached
% gdb --pid <pid of kscreenlocker>
Result
Attaching to process <pid of kscreenlocker>
ptrace: Operation not permitted.
REPOSITORY
rKSCREENLOCKER KScreenLocker
REVISION DETAIL
https://phabricator.kde.org/D1216
AFFECTED FILES
CMakeLists.txt
config-kscreenlocker.h.cmake
greeter/main.cpp
kcheckpass/kcheckpass.c
EMAIL PREFERENCES
https://phabricator.kde.org/settings/panel/emailpreferences/
To: tcberner, graesslin, rakuco
Cc: plasma-devel
_______________________________________________
Plasma-devel mailing list
Plasma-devel@kde.org
https://mail.kde.org/mailman/listinfo/plasma-devel
