]> git-server-git.apps.pok.os.sepia.ceph.com Git - ceph.git/commit
projects / ceph.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 513f1c5) | patch
cephadm: add allow_ptrace option to enable SYS_PTRACE 33442/head
authorSage Weil <sage@redhat.com>
Mon, 16 Mar 2020 16:06:08 +0000 (11:06 -0500)
committerSage Weil <sage@redhat.com>
Tue, 17 Mar 2020 02:04:22 +0000 (21:04 -0500)
commitd7de2abc2f816e395b4438fd112374e31a231139
tree17a725a1702b341fcb1a041ea77644dabab52137tree | snapshot
parent513f1c56d52c6c9671365ba11e8160b5647aa34ccommit | diff
cephadm: add allow_ptrace option to enable SYS_PTRACE

In any environments it is helpful to have SYS_PTRACE so that you can
gdb attach or strace a daemon.

Leave this off by default so that the container is more secure.

Enable this in teuthology and vstart.

Signed-off-by: Sage Weil <sage@redhat.com>
qa/suites/rados/cephadm/upgrade/1-start.yaml diff | blob | history
qa/tasks/cephadm.py diff | blob | history
src/cephadm/cephadm diff | blob | history
src/mon/MonCommands.h diff | blob | history
src/pybind/mgr/cephadm/module.py diff | blob | history
src/vstart.sh diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.