posted by Eugenia Loli-Queru on Wed 23rd Jan 2008 22:04 UTC, submitted by Tyr.
IconPT_DENY_ATTACH is a non-standard ptrace() request type that prevents a debugger from attaching to the calling process. Adam Leventhal recently discovered that Leopard extends PT_DENY_ATTACH to prevent introspection into processes using dtrace. This article will cover disabling PT_DENY_ATTACH for all processes on Mac OS X 10.5. Over the previous few years, I've provided similar hacks for both Mac OS X 10.4, and 10.3.
e p (3)    5 Comment(s)

Related Articles

posted by David Adams on Wed 1st Oct 2008 14:32
posted by Amjith Ramanujam on Fri 19th Sep 2008 21:00 submitted by Ward D
posted by David Adams on Thu 11th Sep 2008 16:13 submitted by Frank Lopez