Remove ptrace calls from Linux process scan (#989)
Remove ptrace calls from Linux process scan (#989)

Attaching to the target process is not necessary to read its memory
via the /proc/$PID/{maps,mem} interface.

Using PTRACE_ATTACH caused the target process to be halted during the
scan, making it risky to use YARA memory scans on production Linux
systems.
VirusTotal/yara,pombredanne/yara,hillu/yara,cblichmann/yara,pombredanne/yara,VirusTotal/yara,plusvic/yara,cblichmann/yara,hillu/yara,wxsBSD/yara,VirusTotal/yara,wxsBSD/yara,wxsBSD/yara,hillu/yara,plusvic/yara,VirusTotal/yara,cblichmann/yara,wxsBSD/yara,cblichmann/yara,hillu/yara,plusvic/yara,pombredanne/yara,plusvic/yara,cblichmann/yara,pombredanne/yara,wxsBSD/yara,hillu/yara,VirusTotal/yara,plusvic/yara,pombredanne/yara