Re: How to fix the ptrace flaw without rebooting

[Nuno Silva]

Hello!

Erik Hensema wrote:
> 
> If you can't reboot to apply a security fix, you've got a serious problem.
> 
> A better fix in a running system is to simply disable dynamic module
> loading: echo /no/such/file > /proc/sys/kernel/modprobe
> At the very least you can be sure your machine won't crash this way ;-)
> 

IIRC, dynamic module loading is not required to exploit all the bugs 
present in ptrace. Luckly all the exploits floating around require kmod :)

Regards,
Nuno Silva