Re:Unprivileged Process Injection Techniques in Linux
by charcircuit on Sunday December 31, 2023 @07:38PM
(#38828740)
Writing to /proc/pid/mem requires access to ptrace. I never said it would use ptrace directly.
[ Parent
| on HN ]
Re:Unprivileged Process Injection Techniques in Linux
by Retr0id on Monday January 01, 2024 @06:29AM
(#38831136)
It's gated by the same access control logic that governs ptrace yes, but it does not use ptrace directly nor indirectly. The first step of that logic is:
> If the calling thread and the target thread are in the same thread group, access is always allowed.