Commit d006c24b authored by Jeff Xu's avatar Jeff Xu Committed by Todd Kjos
Browse files

ANDROID: GKI: enable CONFIG_PROC_MEM_FORCE_PTRACE



CONFIG_PROC_MEM_FORCE_PTRACE blocks /proc/pid/mem write
unless an active ptrace session is on-going.

Writing to /proc/pid/mem allows modifying RO/RX memory, and has been
reported in VRP in ChromeOS, and ChromeOS blocks all write to
/proc/pid/mem.

On android, we couldn't block all write to /proc/pid/mem, because of
the debugging support in developer mode. CONFIG_PROC_MEM_FORCE_PTRACE
is the next best option available.

There is a slight chance that some apps might use this to overwrite
its RX memory, however I do not think this shall be supported by
Android.

CONFIG_PROC_MEM_FORCE_PTRACE patch is available since 6.12, and
was backport to LTS kernels.

And this patch enable it for android main branch.

Bug: 444294336
Change-Id: I3d3996bf82056b9a33e861ceece052078483aa47
Signed-off-by: default avatarJeff Xu <jeffxu@google.com>
parent da4a3a65
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please to comment