Does CrowdSec need ptrace? - CrowdSec

CrowdSec•4w ago•

23 replies

GNU Plus Windows User

Does CrowdSec need ptrace?

Linux

I noticed that my AppArmor logs are logging denials for ptrace, this doesn't seem like something CrowdSec needs, is this normal?

type=AVC msg=audit(1768634104.012:527362): apparmor="DENIED" operation="ptrace" class="ptrace" profile="/usr/bin/crowdsec" pid=778088 comm="crowdsec" requested_mask="read" denied_mask="read" peer="unconfined"

type=AVC msg=audit(1768634104.012:527362): apparmor="DENIED" operation="ptrace" class="ptrace" profile="/usr/bin/crowdsec" pid=778088 comm="crowdsec" requested_mask="read" denied_mask="read" peer="unconfined"