Any way to resolve code injection?

1115 · February 10, 2021, 9:51pm

Hi, are there any analogs to /proc/sys/kernel/yama/ptrace_scope?

doct0rHu · February 11, 2021, 12:47am

is Yama not working?

1115 · February 11, 2021, 4:08am

there isnt a folder for it in …/kernel
but via search i saw a folder with same name containing makefile

doct0rHu · February 11, 2021, 7:56am

Make a request:

github.com

clearlinux-pkgs/linux/blob/1dbe0db37b9e78d34afbdd189678115f1e9bf909/config#L8368


      
          CONFIG_HARDENED_USERCOPY=y
          # CONFIG_HARDENED_USERCOPY_FALLBACK is not set
          # CONFIG_HARDENED_USERCOPY_PAGESPAN is not set
          CONFIG_FORTIFY_SOURCE=y
          # CONFIG_STATIC_USERMODEHELPER is not set
          # CONFIG_SECURITY_SELINUX is not set
          # CONFIG_SECURITY_SMACK is not set
          # CONFIG_SECURITY_TOMOYO is not set
          # CONFIG_SECURITY_APPARMOR is not set
          # CONFIG_SECURITY_LOADPIN is not set
          # CONFIG_SECURITY_YAMA is not set
          CONFIG_SECURITY_SAFESETID=y
          CONFIG_SECURITY_LOCKDOWN_LSM=y
          # CONFIG_SECURITY_LOCKDOWN_LSM_EARLY is not set
          CONFIG_LOCK_DOWN_KERNEL_FORCE_NONE=y
          # CONFIG_LOCK_DOWN_KERNEL_FORCE_INTEGRITY is not set
          # CONFIG_LOCK_DOWN_KERNEL_FORCE_CONFIDENTIALITY is not set
          # CONFIG_INTEGRITY is not set
          # CONFIG_IMA_SECURE_AND_OR_TRUSTED_BOOT is not set
          CONFIG_DEFAULT_SECURITY_DAC=y
          CONFIG_LSM="yama,loadpin,safesetid,integrity"