Skip to content

Commit 74a3a9f

Browse files
committed
update pkg
1 parent 3a978fc commit 74a3a9f

2 files changed

Lines changed: 7 additions & 1 deletion

File tree

debian/changelog

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,9 @@
1+
nitrux-system-settings (0.7.5) nitrux; urgency=medium
2+
3+
* Only enable level 1 ptrace restriction.
4+
5+
-- Uri Herrera <uri_herrera@nxos.org> Sun, 24 May 2026 03:15:00 -0600
6+
17
nitrux-system-settings (0.7.5) nitrux; urgency=medium
28

39
* Disable the ability of unprivileged users to attach to other processes using the ptrace().

etc/sysctl.d/99-nx-sysctl-overrides.conf

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -116,7 +116,7 @@ kernel.split_lock_mitigate=0
116116

117117
# The mitigation disables the ability of unprivileged users to attach to other processes using the ptrace() system call.
118118
# This is generally used by debuggers. The kernel.yama.ptrace_scope sysctl can be used to restrict the situations in which the affected system call can be used.
119-
kernel.yama.ptrace_scope=2
119+
kernel.yama.ptrace_scope=1
120120

121121
#########################################################################
122122
# DISABLING UNPRIVILEGED USER NAMESPACES WILL BRAKE THE FOLLOWING: #

0 commit comments

Comments
 (0)