[Bug dynamic-link/30134] DT_AUDIT is ignored for dlopen()ed solib

["fweimer at redhat dot com" <sourceware-bugzilla@sourceware.org>]

https://sourceware.org/bugzilla/show_bug.cgi?id=30134

--- Comment #6 from Florian Weimer <fweimer at redhat dot com> ---
(In reply to Stas Sergeev from comment #5)
> (In reply to Florian Weimer from comment #4)
> > We also have hard limits on the number of auditors. The explicit one
> > (namespace count) is perhaps somewhat easy to overcome, but there is also
> > the static TLS space consumption by new auditing namespaces.
> 
> I am yet to understand why every
> audit module needs a new NS. Wouldn't
> it be possible to use one separate
> NS for all audit modules?

I don't know. It does seem wasteful. I haven't seen many production examples of
audit modules. Multiple auditors loaded at startup may be rare (even rarer than
auditing itself), so it's possible that we could switch to a single separate
namespace without impacting backwards compatibility.

If the auditor cannot intercept libc.so.6 calls because it is already loaded,
then it can even use the main libc.so.6, and no fully separate namespace is
needed at all. There are many open questions and things to explore in this
area.

-- 
You are receiving this mail because:
You are on the CC list for the bug.