Ptrace vulnerability in 2.2 and 2.4 kernels
Posted Mar 18, 2003 20:32 UTC (Tue) by brianr
In reply to: Ptrace vulnerability in 2.2 and 2.4 kernels
Parent article: Ptrace vulnerability in 2.2 and 2.4 kernels
Such a module works by wrapping or stubbing the ptrace function in the kernel. You can do this yourself creating a small module with a do-nothing fake_ptrace function. During module init, set sys_call_table[__NR_ptrace]=fake_ptrace so the fake ptrace gets run instead of the real one. Search google for "no ptrace module" to find a few readymade ptrace wrapper/stub modules.
to post comments)