guix-commits
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

01/01: system: activate-ptrace-attach: Handle kernels without YAMA suppo


From: Mark H. Weaver
Subject: 01/01: system: activate-ptrace-attach: Handle kernels without YAMA support.
Date: Sat, 09 May 2015 17:15:10 +0000

mhw pushed a commit to branch master
in repository guix.

commit 15f0de0581987c539f86012bf524559e283f5942
Author: Mark H Weaver <address@hidden>
Date:   Sat May 9 12:57:36 2015 -0400

    system: activate-ptrace-attach: Handle kernels without YAMA support.
    
    * gnu/build/activation.scm (activate-ptrace-attach): Check for the existence
      of /proc/sys/kernel/yama/ptrace_scope before trying to write to it.
---
 gnu/build/activation.scm |    8 +++++---
 1 files changed, 5 insertions(+), 3 deletions(-)

diff --git a/gnu/build/activation.scm b/gnu/build/activation.scm
index 8697d9d..352e736 100644
--- a/gnu/build/activation.scm
+++ b/gnu/build/activation.scm
@@ -369,9 +369,11 @@ found in Linux 3.4 onward that prevents users from 
attaching to their own
 processes--see Yama.txt in the Linux source tree for the rationale.  This
 sounds like an unacceptable restriction for little or no security
 improvement."
-  (call-with-output-file "/proc/sys/kernel/yama/ptrace_scope"
-    (lambda (port)
-      (display 0 port))))
+  (let ((file "/proc/sys/kernel/yama/ptrace_scope"))
+    (when (file-exists? file)
+      (call-with-output-file file
+        (lambda (port)
+          (display 0 port))))))
 
 
 (define %current-system



reply via email to

[Prev in Thread] Current Thread [Next in Thread]