Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
Name: aaa_base-yama-enable-ptrace | Distribution: openSUSE Tumbleweed |
Version: 84.87+git20240906.742565b | Vendor: openSUSE |
Release: 1.1 | Build date: Fri Sep 6 11:04:40 2024 |
Group: System/Fhs | Build host: reproducible |
Size: 1001 | Source RPM: aaa_base-84.87+git20240906.742565b-1.1.src.rpm |
Packager: https://bugs.opensuse.org | |
Url: https://github.com/openSUSE/aaa_base | |
Summary: sysctl setting to allow ptrace with the YAMA LSM enabled |
When the YAMA LSM is enabled, ptrace is restriced by default. On developer systems this has an impact on e.g. strace and gdb. So this package contains a setting that allows ptrace again. See https://docs.kernel.org/admin-guide/LSM/Yama.html
GPL-2.0-or-later
* Fri Sep 06 2024 dmueller@suse.com - Update to version 84.87+git20240906.742565b: * yama-enable-ptrace: enforce changed behavior upon installation (bsc#1221763) * Avoid unnecessary /bin/bash dependency * sysctl: Fixup of not setting kernel.pid_max on 32b archs (bsc#1227117) * Wed Aug 21 2024 kukuk@suse.com - Update to version 84.87+git20240821.fbabe1d: * Add helper service for soft-reboot * Fri Aug 09 2024 kukuk@suse.com - Update to version 84.87+git20240809.5d13eb4: * cleanup aaa_base.post and fold back into specfile * Mon Aug 05 2024 ro@suse.com - Update to version 84.87+git20240805.7513b28: * Remove obsolete resolv+ manual page * Remove obsolete defaultdomain.5 manual page * Move /etc/skel to /usr/etc/skel (hermetic-usr) * Remove obsolete refresh_initrd * Add deprecation notice for service [jsc#PED-266] * Thu Aug 01 2024 kukuk@suse.com - Update to version 84.87+git20240801.75f05dd: * sysctl: Don't set kernel.pid_max on 32b archs (bsc#1227117) * Fri Jun 21 2024 kukuk@suse.com - Update to version 84.87+git20240620.57ee9e1: * Remove legacy-actions support [jsc#PED-264] * Mon Jun 17 2024 ro@suse.com - Update to version 84.87+git20240617.f5ff27f: * add /usr/bin/nu to etc/shells for nushell * Fri Jun 14 2024 ro@suse.com - Update to version 84.87+git20240614.332933e: * Do not save/restore cursor for foot at status line * Add tmux and others to DIR_COLORS (Issue #116) * Remove kernel.pid_max limit (bsc#1219038) * Add subpackge to enable ptrace * Fri May 24 2024 kukuk@suse.com - Update to version 84.87+git20240523.10a5692: * Add tmpfiles.d/soft-reboot-cleanup.conf * Mon Apr 15 2024 lnussel@suse.com - Update to version 84.87+git20240415.e6815bf: * drop obsolete 50-default-s390.conf (bsc#1211721) * fix typo in alljava.csh and drop stderr redirection * Tue Apr 02 2024 lnussel@suse.com - Update to version 84.87+git20240402.16596d1: * add alacritty to DIR_COLORS * Make sure tput it present before resetting TERM * Add mc helpers for both tcsh and bash resources * Do not overwrite escape sequences for xterm like * Check for valid TERM * Fri Feb 02 2024 ro@suse.com - Update to version 84.87+git20240202.9526d46: * properly shorten the variable when setting JAVA_HOME and JRE_HOME * silence output of alljava * Restrict ptrace with Yama LSM by default * patch alljava.sh and alljava.csh, use the links from update alternatives * Mon Oct 23 2023 lnussel@suse.de - Update to version 84.87+git20231023.f347d36: * Remove %ghost lastlog entry, lastlog is long gone * Remove shaky safe-rm and safe-rmdir helpers (bsc#1159103) * Tue Aug 15 2023 lnussel@suse.com - Update to version 84.87+git20230815.cab7b44: * Remove broken autocompletion overrides and restore default bash behavior * Add foot to DIR_COLORS * files/u/s/sysconf_addword: avoid bashism, fix shellcheck warnings * files/u/s/smart_agetty: replace shebang with /bin/sh * files/u/s/service: avoid bashism, fix shellcheck warnings * files/u/s/refresh_initrd: make POSIX compliant * files/u/b/safe-rm: make POSIX compliant * aaa_base.post: replace shebang with /usr/sh * files/u/b/old: make POSIX compliant * Wed Mar 29 2023 lnussel@suse.de - Update to version 84.87+git20230329.b39efbc: * Fix glibc requirement * Thu Mar 09 2023 lnussel@suse.de - Update to version 84.87+git20230309.04eae92: * Add conditional glibc requirement back * Keep owning /etc/sysctl.conf to avoid rpmsave * Mon Feb 20 2023 lnussel@suse.de - Update to version 84.87+git20230220.2991cfd: * Add instructions to build in place * Remove pre scriptlet * Don't create mtab symlink * Don't create /root/.bash_history * Don't enable lastlog by default * Fix #91: do not accidental unset shell functions * Prepare more /etc cleanup * Tue Sep 06 2022 lnussel@suse.de - Update to version 84.87+git20220822.6b9f7a3: * Simplify XDG_CONFIG_DIRS (boo#1201802) * Fri Aug 05 2022 gmbr3@opensuse.org - Update to version 84.87+git20220727.43b9e53: * Use HOSTTYPE in MACHTYPE * Move suse to VENDOR * Use /var/mail for MAIL * Wed May 18 2022 werner@suse.de - Update to version 84.87+git20220518.dc83f4e: * Also in /etc/profile, rootsh is not restricted * Wed May 18 2022 werner@suse.de - Update to version 84.87+git20220518.78b2a0b: * The wrapper rootsh is not a restricted shell * Tue Apr 19 2022 lnussel@suse.de - Update to version 84.87+git20220419.bf51b75: * add Yama LSM sysctl setting and description * Stop lowering the inotify limit * move DIR_COLORS to where ls.bash is * Mon Apr 11 2022 lnussel@suse.de - Update to version 84.87+git20220411.adfb912: * move bash completion back to -extras (bsc#1187213) * Thu Mar 24 2022 dmueller@suse.com - Update to version 84.87+git20220324.fca4619: * No completion in restricted bash * No longer install /usr/lib/restricted/bin/hostname => /bin/hostname symlink * Mon Mar 21 2022 lnussel@suse.de - Update to version 84.87+git20220321.f60f2de: * order header in the way spec-cleaner wants it * move changes from package to git * merge audio files highlighting fixes from coreutils 9 * Update from coreutils 9 * Make source validator happy * Mon Mar 21 2022 lnussel@suse.de - Update to version 84.87+git20220321.5a5cb79: * DIR_COLORS: lz support * DIR_COLORS: zstd support * Mon Feb 21 2022 lnussel@suse.de - Update to version 84.87+git20220221.b62a2cf: * package: Require new enough version of glibc * package: build in place support * drop /etc/ttytype (boo#1191923) * Sat Dec 11 2021 dleuenberger@suse.com - Update to version 84.87+git20211206.de24bdf: * Add "rpm" make target * Remove legacy usrmerged sections * Add rpmlintrc and README from OBS too * Fix osc service instructions * Add obs workflow for git integration * Adopt upstream way of setting rp_filter and promote_secondaries * Don't fail if net.ipv4.ping_group_range can't be set * add spec file * Thu Nov 25 2021 Dr. Werner Fink <werner@suse.de> - Clear term.sh and term.csh also from file list * Wed Nov 24 2021 werner@suse.de - Update to version 84.87+git20211124.5486aad: * Remove term.sh and term.csh: no COLORTERM anymore Avoid changing COLORTERM variable in urxvt (boo#1190833) * Tue Nov 02 2021 ro@suse.de - Update to version 84.87+git20211102.80d7177: * Add $HOME/.local/bin to PATH, if it exists (bsc#1192248) * Avoid tcsh undefined LANG variable (boo#1190142) * Mon Aug 23 2021 kukuk@suse.com - Update to version 84.87+git20210823.4c98889: * Remove /etc/hushlogins * Thu Aug 19 2021 lnussel@suse.de - Update to version 84.87+git20210819.b55340d: * Rework locale checks for better support of ssh * Update mime types from apache * Better support of Midnight Commander color skins (boo#1188862) * Wed Jul 28 2021 kukuk@suse.com - Update to version 84.87+git20210727.b447649: * Move /etc/profile.d/* to /usr/etc/profile.d/ * Tue Jun 22 2021 Dominique Leuenberger <dimstar@opensuse.org> - Switch back to using tar_scm in _service file: with aaa_base being part of the distro bootstrap (ring0) we want to have the build deps as lean as possible. Buildtime services equals to build deps. * Wed Jun 16 2021 lnussel@suse.de - Update to version 84.87+git20210616.9cf42ff: * add media type application/wasm (boo#1187387) * Remove legacy links in /sbin * Fix profile.csh to really set http proxies * Tue Jun 01 2021 werner@suse.de - Update to version 84.87+git20210601.8cb043f: * Use shell builtins for $HOSTTYPE and others (boo#1186296) * Wed Mar 17 2021 ro@suse.de - Update to version 84.87+git20210317.2c04190: * Don't rely on external dirname utility, but use ${d:h} tcsh expression. * Enable locking feature of tcsh history file handling * Add tcsh xd alias as well. * Add ash xd() function as well. * Add new function xd() "jump to the directory of a file" * Mon Mar 08 2021 ro@suse.de - Update to version 84.87+git20210308.d7a7d3a: * excluding new kernel string in version search * Fixing possible resource leak. Found by running ccpcheck on the source code. * Comment out 8-bit C1 conflicting with UTF-8 in /etc/inputrc * Fix keyseq specifications in /etc/inputrc{,.keys}
/usr/lib/sysctl.d/52-yama.conf
Generated by rpm2html 1.8.1
Fabrice Bellet, Wed Dec 25 23:14:26 2024