[Kernel-packages] [Bug 1860822] Re: ptrace fails with yama/ptrace_scope=0

2020-01-26 Thread jklowden
Seth, thank you kindly for your prompt and clear answer. I modified server.c and confirm that gdb can now attach to the child process. Although prctl(PR_SET_DUMPABLE, 1) has no effect (and returns 0!) when called before resetting privileges, it works after the gid has been reset to the debugging p

[Kernel-packages] [Bug 1860822] [NEW] ptrace fails with yama/ptrace_scope=0

2020-01-24 Thread jklowden
Public bug reported: I cannot attach to a process with gdb despite setting ptrace_scope to 0. The process has no capabilities, and is running under my uid & gid. The process is a child, forked from a privileged program that has divested itself of its parent's privileges. The parent is setgid and