Use ptrace(PT_DENY_ATTACH, ..) on OS X.

1 files changed, 8 insertions, 0 deletions

diff --git a/platform-tracing.c b/platform-tracing.c
index 81020e7f7..4c80a282c 100644
--- a/platform-tracing.c
+++ b/platform-tracing.c
@@ -20,6 +20,9 @@
 #if defined(HAVE_SYS_PRCTL_H)
 #include <sys/prctl.h>  /* For prctl() and PR_SET_DUMPABLE */
 #endif
+#ifdef HAVE_SYS_PTRACE_H
+#include <sys/ptrace.h>
+#endif
 #ifdef HAVE_PRIV_H
 #include <priv.h> /* For setpflags() and __PROC_PROTECT  */
 #endif
@@ -40,4 +43,9 @@ platform_disable_tracing(int strict)
         if (setpflags(__PROC_PROTECT, 1) != 0 && strict)
                 fatal("unable to make the process untraceable");
 #endif
+#ifdef PT_DENY_ATTACH
+        /* Mac OS X */
+        if (ptrace(PT_DENY_ATTACH, 0, 0, 0) == -1 && strict)
+                fatal("unable to set PT_DENY_ATTACH");
+#endif
 }