| commit | 376b3c54bba7d235e5a8e2839bb333a826b19636 | [log] [tgz] |
|---|---|---|
| author | Rich Felker <dalias@aerifal.cx> | Wed Feb 07 14:31:42 2018 -0500 |
| committer | Rich Felker <dalias@aerifal.cx> | Wed Feb 07 14:31:42 2018 -0500 |
| tree | 8453a90317de98662a71048df26c826fe39fec89 | |
| parent | f0b235c138d26caafeda44475818508f1911e78e [diff] |
disallow non-absolute rpath $ORIGIN for suid/sgid/AT_SECURE processes in theory non-absolute origins can only arise when either the main program is invoked by running ldso as a command (inherently non-suid) or when dlopen was called with a relative pathname containing at least one slash. such usage would be inherently insecure in an suid program anyway, so the old behavior here does not seem to have been insecure. harden against it anyway.