Review Request 126276: Disable ptrace on kdesu

Martin Gräßlin mgraesslin at kde.org
Wed Dec 16 09:36:50 UTC 2015



> On Dec. 16, 2015, 10:15 a.m., Harald Sitter wrote:
> > CMakeLists.txt, line 93
> > <https://git.reviewboard.kde.org/r/126276/diff/1/?file=421386#file421386line93>
> >
> >     description needs update for kdesu

good spot!


- Martin


-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://git.reviewboard.kde.org/r/126276/#review89585
-----------------------------------------------------------


On Dec. 8, 2015, 1 p.m., Martin Gräßlin wrote:
> 
> -----------------------------------------------------------
> This is an automatically generated e-mail. To reply, visit:
> https://git.reviewboard.kde.org/r/126276/
> -----------------------------------------------------------
> 
> (Updated Dec. 8, 2015, 1 p.m.)
> 
> 
> Review request for Plasma.
> 
> 
> Repository: kde-cli-tools
> 
> 
> Description
> -------
> 
> This change protects against other user processes attaching to the kdesu
> process to gain the root password.
> 
> 
> Diffs
> -----
> 
>   CMakeLists.txt 31209e049b0f054f88a8471cdfa34eb99b2d38da 
>   config-kde-cli-tools.h.cmake f7eb81e3ab541faee2d8d6a15c870c68dd649dd2 
>   kdesu/kdesu.cpp b82bdd4d7bdb3f8cf47fa46ac7d878d01f4cc551 
> 
> Diff: https://git.reviewboard.kde.org/r/126276/diff/
> 
> 
> Testing
> -------
> 
> with the change: ptrace: Operation not permitted.
> without I was able to set breakpoint in the checkPassword method.
> 
> 
> Thanks,
> 
> Martin Gräßlin
> 
>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.kde.org/pipermail/plasma-devel/attachments/20151216/573bebe1/attachment.html>


More information about the Plasma-devel mailing list