Noticed this in my Tumbleweed systemd Journal –
[ 1.076829] kernel: Yama: becoming mindful.
First reaction: “Huh???!!!” + „Verflixt noch mal!!! … ” ![]()
Answer: <https://www.kernel.org/doc/html/v4.15/admin-guide/LSM/Yama.html>
One particularly troubling weakness of the Linux process interfaces is that a single user is able to examine the memory and running state of any of their processes.
# cat /proc/sys/kernel/yama/ptrace_scope
1
#
In other words, at least Tumbleweed is set to: restricted ptrace …
a process must have a predefined relationship with the inferior it wants to call
PTRACE_ATTACHon. By default, this relationship is that of only its descendants when the above classic criteria is also met
![]()