ptrace_allow_access doesn't check supplementary groups when checking access.

Solution Unverified - Updated -

Issue

  • There are cases when doing parallel debugging that primary group access is not quite enough to debug code.
  • When it is just a local problem it is easy to just run newgrp and then rerun the debugger but there is no provision for having the debugger stub to change its credentials and restarting itself with a new primary credential.
  • Thus it is believed that the logic in __ptrace_allow_attach is insufficient. It should also check the supplementary group.

Environment

  • Red Hat Enterprise Linux 6

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.

Current Customers and Partners

Log in for full access

Log In
Close

Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.