Re: New proposed system group "scap" and setuid binary "dumpcalls"
On Mon, Oct 06, 2025 at 05:01:39PM +0200, Bálint Réczey wrote:
> > From my view: it needs to employ the "can ptrace" check for any
> > monitored process.
> I think that would also be against the monitoring's usefulness. Not
> ptrace-able processes can cause issues to be triaged, too.
In that case you need to go through the normal elevation rules. So
either sudo oder packagekit.
Bastian
--
Violence in reality is quite different from theory.
-- Spock, "The Cloud Minders", stardate 5818.4
Reply to: