On 07/26/2011 01:59 PM, Tom Horsley wrote:
> tomh> strace -o working.trace rsh tomh date
> rcmd: socket: Permission denied

It's presumably being having its capabilities dropped because you are ptracing
an executable with the cap_net_bind_service capability as an unprivileged user
(if it wasn't it would be a security hole as a regular user could use a debugger
to bind arbitrary privileged ports).

Older releases had the same behaviour when ptracing SUID binaries - this is the
same reason you cannot strace the ping command (requires a raw socket so is
either SUID or cap_net_raw).

Regards,
Bryn.
-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines

Reply via email to