Of course they can! How do you think a debugger works?
back
1 comments
Because a debugger launches the target process as a child process and thus has access to its memory?
/proc/sys/kernel/yama/ptrace_scope is usually set to 1 on non-Selinux distros.
Without this flag it can also attach to existing processes and on my Debian this is set to zero.