kernel.yama.ptrace_scope default

[jukuisma]

Feature Request or Enhancement

• Feature
• Enhancement

Summary of Request

Can't find any mentions of yama nor ptrace in source code or docs. System seems to use RHEL default:

$ sysctl kernel.yama.ptrace_scope
kernel.yama.ptrace_scope = 0

even after hardening. Seems super lax to me, but I guess it can also be argued that this is just a baseline. Any thoughts?

https://www.kernel.org/doc/html/latest/admin-guide/LSM/Yama.html

Cheers, Juho

[uk-bolly]

hi @jukuisma

This is actually part of the v2.0.0 CIS benchmark, which is due to be released in the next couple of weeks.

Many thanks

uk-bolly