From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: by sourceware.org (Postfix, from userid 48) id C3C863858C50; Mon, 27 Feb 2023 06:03:33 +0000 (GMT) DKIM-Filter: OpenDKIM Filter v2.11.0 sourceware.org C3C863858C50 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sourceware.org; s=default; t=1677477813; bh=CUuGtma/UY8n8hB2z2U29Iueh8Tnk9QRq/9C7HyLKxg=; h=From:To:Subject:Date:In-Reply-To:References:From; b=Lr2q1qN7/Y7+TXfzDDijeiOCCWpgYzDppMSzfdHm6oHcMI6kSVdXHQ2gS4AMNQhT9 1bwNergQ70sKRCgNnn5RhKtFPvkImB+ysudRUZL4LbhXuQmVNQ3tEnUOQKGseaTmHg 90Gdu7HbtehDa6ZIMmFo7jaIDfl2QklHW7n0P+2I= From: "stsp at users dot sourceforge.net" To: glibc-bugs@sourceware.org Subject: [Bug dynamic-link/30134] DT_AUDIT is ignored for dlopen()ed solib Date: Mon, 27 Feb 2023 06:03:33 +0000 X-Bugzilla-Reason: CC X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: glibc X-Bugzilla-Component: dynamic-link X-Bugzilla-Version: 2.38 X-Bugzilla-Keywords: X-Bugzilla-Severity: normal X-Bugzilla-Who: stsp at users dot sourceforge.net X-Bugzilla-Status: UNCONFIRMED X-Bugzilla-Resolution: X-Bugzilla-Priority: P2 X-Bugzilla-Assigned-To: unassigned at sourceware dot org X-Bugzilla-Target-Milestone: --- X-Bugzilla-Flags: security- X-Bugzilla-Changed-Fields: Message-ID: In-Reply-To: References: Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Bugzilla-URL: http://sourceware.org/bugzilla/ Auto-Submitted: auto-generated MIME-Version: 1.0 List-Id: https://sourceware.org/bugzilla/show_bug.cgi?id=3D30134 --- Comment #15 from Stas Sergeev --- (In reply to Jonathon Anderson from comment #14) > In other words, the main executable gets mapped (long) before the auditors > get loaded. Yes, but: - We can see that la_objopen is explicitly called for main executable and ld.so, as if they were loaded later. - As I pointed, solibs are processed later yet. So no matter what, the auditor gets the calls for every object, including the one that links it in, and all its deps. > I suppose solibs could be different, but AFAICT you would have to refactor > _dl_map_object_from_fd to *also* read the dynamic section and recursively > load any auditors *before* its call to _dl_map_segments. Or just do similar to dl_main() and call the new auditors at the end? Of course objsearch will be skipped, but its the same for dl_main() and no one complained. It would be really weird if the auditor wants to alter the object path of the object to which it linked to. --=20 You are receiving this mail because: You are on the CC list for the bug.=