posted by Eugenia Loli-Queru on Wed 23rd Jan 2008 22:04 UTC, submitted by Tyr.
IconPT_DENY_ATTACH is a non-standard ptrace() request type that prevents a debugger from attaching to the calling process. Adam Leventhal recently discovered that Leopard extends PT_DENY_ATTACH to prevent introspection into processes using dtrace. This article will cover disabling PT_DENY_ATTACH for all processes on Mac OS X 10.5. Over the previous few years, I've provided similar hacks for both Mac OS X 10.4, and 10.3.
e p (3)    5 Comment(s)

Related Articles

posted by Thom Holwerda on Thu 4th Sep 2008 16:52 submitted by BlueVoodoo
posted by Adam S on Tue 26th Aug 2008 20:42, submitted by jmalasko