RACF authorization

R_ptrace checks whether the caller is a superuser, or whether the caller is the owner of the target process. If the caller is the owner of the target process, R_ptrace verifies that the target process is not running a SETUID or SETGID program. If the caller is a superuser, R_ptrace does not verify that the target precess is not running a SETUID or SETGID program.
If the caller is not superuser nor the process owner, an authorization check is performed on the resource name in the UNIXPRIV class shown in Table 1. If the authorization check is successful, the caller is treated as a superuser.
Table 1. UNIXPRIV class resource names used in R_ptrace
Audit function code Resource name Access required
N/A SUPERUSER.PROCESS.PTRACE READ
When the SECLABEL class is active, and the high order bit of the Target_PID is on, R_ptrace checks if the caller's security label is equivalent to the target process's security label, unless the ACEE indicates trusted or privileged authority.