From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: by sourceware.org (Postfix, from userid 48) id B72603858429; Mon, 15 Jan 2024 14:59:43 +0000 (GMT) DKIM-Filter: OpenDKIM Filter v2.11.0 sourceware.org B72603858429 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sourceware.org; s=default; t=1705330783; bh=kRXaFlP4PjDE+kD6UYniHNNpCtiqP4yOws8jCRXZ1do=; h=From:To:Subject:Date:In-Reply-To:References:From; b=TwBBnt86k5ryafp72fthbn9wucKygBamFXjuuGwWVT0BYImYc2hoHJpIW0SzjnsWG 4wP/06yom+wpR75f6iEratYIRWaxnzmIh1A51W6aDItNJ5KM4BqkCn31BiXYMlz38W L9fk3v8YZdkcd1TaX52NAPStvPiEnmerJdT31RPM= From: "cvs-commit at gcc dot gnu.org" To: glibc-bugs@sourceware.org Subject: [Bug dynamic-link/31230] PLT rewrite failed without SELinux Date: Mon, 15 Jan 2024 14:59:41 +0000 X-Bugzilla-Reason: CC X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: glibc X-Bugzilla-Component: dynamic-link X-Bugzilla-Version: 2.39 X-Bugzilla-Keywords: X-Bugzilla-Severity: normal X-Bugzilla-Who: cvs-commit at gcc dot gnu.org X-Bugzilla-Status: NEW X-Bugzilla-Resolution: X-Bugzilla-Priority: P2 X-Bugzilla-Assigned-To: unassigned at sourceware dot org X-Bugzilla-Target-Milestone: --- X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: Message-ID: In-Reply-To: References: Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Bugzilla-URL: http://sourceware.org/bugzilla/ Auto-Submitted: auto-generated MIME-Version: 1.0 List-Id: https://sourceware.org/bugzilla/show_bug.cgi?id=3D31230 --- Comment #2 from Sourceware Commits --- The master branch has been updated by H.J. Lu : https://sourceware.org/git/gitweb.cgi?p=3Dglibc.git;h=3D457bd9cf2e27550dd66= b2d8f3c5a8dbd0dfb398f commit 457bd9cf2e27550dd66b2d8f3c5a8dbd0dfb398f Author: H.J. Lu Date: Fri Jan 12 10:19:41 2024 -0800 x86-64: Check if mprotect works before rewriting PLT Systemd execution environment configuration may prohibit changing a mem= ory mapping to become executable: MemoryDenyWriteExecute=3D Takes a boolean argument. If set, attempts to create memory mappings that are writable and executable at the same time, or to change existing memory mappings to become executable, or mapping shared memory segments as executable, are prohibited. When it is set, systemd service stops working if PLT rewrite is enabled. Check if mprotect works before rewriting PLT. This fixes BZ #31230. This also works with SELinux when deny_execmem is on. Reviewed-by: Carlos O'Donell --=20 You are receiving this mail because: You are on the CC list for the bug.=