Tag: ptrace

为ptrace_scope禁用Docker的AppArmor

是否有可能为特定的Docker容器禁用AppArmor？ 我想使ptrace可访问，所以我可以将gdb附加到正在运行的进程，但是当我想更改设置时遇到以下问题： root@fbf728150308:/gopath# echo 0 > /proc/sys/kernel/yama/ptrace_scope bash: /proc/sys/kernel/yama/ptrace_scope: Read-only file system

gdb无法附加到进程

这是我正在使用的操作系统： Linux securecluster 4.9.8-moby＃1 SMP Wed Feb 8 09:56:43 UTC 2017 x86_64 x86_64 x86_64 GNU / Linux 当试图以挂接用户的身份挂接gdb时，我得到了以下结果： Attaching to process 9636 Could not attach to process. If your uid matches the uid of the target process, check the setting of /proc/sys/kernel/yama/ptrace_scope, or try again as the root user. For more details, see /etc/sysctl.d/10-ptrace.conf ptrace: […]