PT_DENY_ATTACH is a non-standard ptrace() request type that prevents a debugger from attaching to the calling process. Adam Leventhal recently discovered that Leopard extends PT_DENY_ATTACH to prevent introspection into processes using dtrace. This article will cover disabling PT_DENY_ATTACH for all processes on Mac OS X 10.5. Over the previous few years, I’ve provided similar hacks for both Mac OS X 10.4, and 10.3.
Fixing ptrace on Mac OS X 10.5 Leopard
Submitted by Tyr. 2008-01-23 General Development 5 Comments
Since Landon used to work in the Kernel/BSD Group at Apple it’s not a stretch to think he knows something about the inner workings of OS X.
Think ill guy buy a bluray drive, hire movies, dtrace them so i can crack them and sell the copies on ebay, then ill go hack the itunes drm and give the spoils away for free on bit torrent … Ill have to look around to see what other stuff i can do after that 🙂
Or i might just go apply the patch and be happy my drace will work as advertised … undecided !
Ohh and good man Landon for taking the time to do this….
Edited 2008-01-24 00:22 UTC