[arch-general] [arch-dev-public] Trimming down our default kernel configuration
thomas at archlinux.org
Wed Mar 26 17:17:25 EDT 2014
Am 26.03.2014 21:31, schrieb Leonid Isaev:
> On Wed, 26 Mar 2014 21:00:15 +0100
> Thomas Bächler <thomas at archlinux.org> wrote:
>> Am 26.03.2014 20:18, schrieb Leonid Isaev:
>>> However, I don't think that Yama requires any userspace components, does
>>> it? Currently, I boot with "security=yama" and completely disabled
>>> non-admin ptrace (kernel.yama.ptrace_scope=2). Perhaps -ARCH kernels
>>> should keep Yama available albeit disabled by default (as they now do).
>> Once yama is built-in, the ptrace_scope protection is enabled by
>> default. There is no option to change that.
> But by default, kernel.yama.ptrace_scope = 0
No. The default is 1.
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 901 bytes
Desc: OpenPGP digital signature
More information about the arch-general