golden hour

/usr/lib/python3.9/site-packages/sepolicy/help

⬆️ Go Up

Upload

File/Folder	Size	Actions
__init__.py	0 B	Del OK
__pycache__	-	Del OK
booleans.png	71.04 KB	Del OK
booleans.txt	478 B	Del OK
booleans_more.png	60.89 KB	Del OK
booleans_more.txt	193 B	Del OK
booleans_more_show.png	34.13 KB	Del OK
booleans_more_show.txt	62 B	Del OK
booleans_toggled.png	60.51 KB	Del OK
booleans_toggled.txt	310 B	Del OK
file_equiv.png	48.07 KB	Del OK
file_equiv.txt	1.15 KB	Del OK
files_apps.png	80.06 KB	Del OK
files_apps.txt	563 B	Del OK
files_exec.png	66.28 KB	Del OK
files_exec.txt	398 B	Del OK
files_write.png	75.95 KB	Del OK
files_write.txt	567 B	Del OK
lockdown.png	49.41 KB	Del OK
lockdown.txt	291 B	Del OK
lockdown_permissive.png	29.32 KB	Del OK
lockdown_permissive.txt	722 B	Del OK
lockdown_ptrace.png	28.65 KB	Del OK
lockdown_ptrace.txt	1.22 KB	Del OK
lockdown_unconfined.png	26.83 KB	Del OK
lockdown_unconfined.txt	867 B	Del OK
login.png	39.16 KB	Del OK
login.txt	786 B	Del OK
login_default.png	40.7 KB	Del OK
login_default.txt	507 B	Del OK
ports_inbound.png	57.61 KB	Del OK
ports_inbound.txt	336 B	Del OK
ports_outbound.png	51.74 KB	Del OK
ports_outbound.txt	346 B	Del OK
start.png	13.8 KB	Del OK
start.txt	505 B	Del OK
system.png	49.42 KB	Del OK
system.txt	81 B	Del OK
system_boot_mode.png	51.44 KB	Del OK
system_boot_mode.txt	458 B	Del OK
system_current_mode.png	51.41 KB	Del OK
system_current_mode.txt	344 B	Del OK
system_export.png	51.96 KB	Del OK
system_export.txt	416 B	Del OK
system_policy_type.png	53.35 KB	Del OK
system_policy_type.txt	410 B	Del OK
system_relabel.png	51.63 KB	Del OK
system_relabel.txt	399 B	Del OK
transition_file.png	68.14 KB	Del OK
transition_file.txt	1.03 KB	Del OK
transition_from.png	61.75 KB	Del OK
transition_from.txt	619 B	Del OK
transition_from_boolean.png	65.75 KB	Del OK
transition_from_boolean.txt	463 B	Del OK
transition_from_boolean_1.png	70.04 KB	Del OK
transition_from_boolean_1.txt	235 B	Del OK
transition_from_boolean_2.png	31.46 KB	Del OK
transition_from_boolean_2.txt	132 B	Del OK
transition_to.png	57.53 KB	Del OK
transition_to.txt	605 B	Del OK
users.png	56.27 KB	Del OK
users.txt	814 B	Del OK

Edit: lockdown_ptrace.txt

Disable ptrace capability on your system. The deny_ptrace feature allows an administrator to toggle the ability of processes on the computer system from examining other processes on the system, including user processes. It can even block processes running as root. Most people do not realize that any program they run can examine the memory of any other process run by them. Meaning the computer game you are running on your desktop can watch everything going on in Firefox or a programs like pwsafe or kinit or other program that attempts to hide passwords.. SELinux defines this access as ptrace and sys_ptrace. These accesses allow one process to read the memory of another process. ptrace allows developers and administrators to debug how a process is running using tools like strace, ptrace and gdb. You can even use gdb (GNU Debugger to manipulate another process running memory and environment. The problem is this is allowed by default. My wife does not debug programs, why is she allowed to debug them? As a matter of fact most of the time, I am not debugging applications, so it would be more secure if we could disable it by default. Note: Disabling ptrace can break some bug trappers that attempt to collect crash data.
Save