h2o / h2o/neverbleed

refuse debugger being attached

Open
#1 0 comments 0 reactions 0 assignees View on GitHub
enhancement
Dominant language
C
Stars
208
Forks
41
PR merge metrics
No merged PRs in 30d

Description

As of adb7442, the Neverbleed daemon refuses debuggers from being attached only in the following cases:
- always on Linux
- on OS X, if `neverbleed_setuidgid` is called

We should:
- call `ptrace(PT_DENY_ATTACH)` on OS X to always refuse
- explore the possibility of doing same onon other OS

Note: this feature is not a must-have; you can use different UIDs for the daemon and the client.

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.