On Tue, 2015-06-23 at 07:25 -0400, Josh Boyer wrote:
The upstream default is 1 here, correct? It might be worth noting that.
Right, when CONFIG_SECURITY_YAMA is enabled. Added that to the description. Updated patch attached.
diff --git a/kernel.spec b/kernel.spec index dfc4500..87efd85 100644 --- a/kernel.spec +++ b/kernel.spec @@ -460,6 +460,9 @@ Source1000: config-local Source2000: cpupower.service Source2001: cpupower.config
+# Default sysctl files +Source3000: 10-yama-ptrace.conf
We don't ship any other sysctl files in the kernel package.
But we do ship other service and config files. Which is what this patch modeled after. The alternative fix for the kernel is to just disable yama completely. But then the admin cannot add any more yama based restrictions at all if they wanted.
Help me out, is _sysctldir defined as /etc/sysctl.d or /usr/lib/sysctl.d/ ? The latter is where this file should go in any case.
The latter.
Thanks,
Mark