Subject: Re: ptrace() vs. SIGKILL?
To: NetBSD Security Technical Discussion List <tech-security@netbsd.org>
From: der Mouse <mouse@Rodents.Montreal.QC.CA>
List: tech-security
Date: 12/06/2002 23:05:32
>> Heh, I was pondering this the other day after the realisation that
>> ptrace() could prevent SIGKILL from killing a process.

> Hmmm....  If ptrace() could prevent SIGKILL from taking effect for
> anyone but the superuser then that would be a very serious security
> bug, not just on un-hardened boxes.

Greg, meet Reality.

I've never seen a system with ptrace that _didn't_ work this way.  (Not
that I've looked very hard.)

/~\ The ASCII				der Mouse
\ / Ribbon Campaign
 X  Against HTML	       mouse@rodents.montreal.qc.ca
/ \ Email!	     7D C8 61 52 5D E7 2D 39  4E F1 31 3E E8 B3 27 4B