ANDROID: GKI: enable CONFIG_PROC_MEM_FORCE_PTRACE
CONFIG_PROC_MEM_FORCE_PTRACE blocks /proc/pid/mem write
unless an active ptrace session is on-going.
Writing to /proc/pid/mem allows modifying RO/RX memory, and has been
reported in VRP in ChromeOS, and ChromeOS blocks all write to
/proc/pid/mem.
On android, we couldn't block all write to /proc/pid/mem, because of
the debugging support in developer mode. CONFIG_PROC_MEM_FORCE_PTRACE
is the next best option available.
There is a slight chance that some apps might use this to overwrite
its RX memory, however I do not think this shall be supported by
Android.
CONFIG_PROC_MEM_FORCE_PTRACE patch is available since 6.12, and
was backport to LTS kernels.
And this patch enable it for android main branch.
Bug: 444294336
Change-Id: I3d3996bf82056b9a33e861ceece052078483aa47
Signed-off-by:
Jeff Xu <jeffxu@google.com>
Loading
Please sign in to comment