grsecurity forums

grsec: From 62.237.194.186: (default:D:/usr/bin/gdb) denied ptrace of /home/cmouse/projects/HBS/hbs(hbs:15102) by /usr/bin/gdb[gdb:21410] uid/euid:1000/1000 gid/egid:1000/1000, parent /home/cmouse/projects/HBS/hbs[hbs:15102] uid/euid:1000/1000 gid/egid:1000/1000

Can I somehow allow certain users to be exempt of ptrace restrictions so that they can debug their processes using gdb attach. I can make gdb debug stuff if they are started within gdb, but if I try to attach to something, I get that. Is there a way to allow it to attach to processes?

in /etc/grsec/policy:

# new subject modes:
# r -> relax ptrace restrictions (allows process to ptrace processes
# other than its own descendants)

-Brad

Thank you for pointing this out =)