From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 5544 invoked by alias); 9 Dec 2010 14:47:26 -0000 Received: (qmail 5504 invoked by uid 22791); 9 Dec 2010 14:47:25 -0000 X-SWARE-Spam-Status: No, hits=-6.2 required=5.0 tests=AWL,BAYES_00,RCVD_IN_DNSWL_HI,SPF_HELO_PASS,T_RP_MATCHES_RCVD X-Spam-Check-By: sourceware.org Received: from mx1.redhat.com (HELO mx1.redhat.com) (209.132.183.28) by sourceware.org (qpsmtpd/0.43rc1) with ESMTP; Thu, 09 Dec 2010 14:47:20 +0000 Received: from int-mx02.intmail.prod.int.phx2.redhat.com (int-mx02.intmail.prod.int.phx2.redhat.com [10.5.11.12]) by mx1.redhat.com (8.13.8/8.13.8) with ESMTP id oB9ElJq5019000 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK) for ; Thu, 9 Dec 2010 09:47:19 -0500 Received: from hase (ovpn01.gateway.prod.ext.phx2.redhat.com [10.5.9.1]) by int-mx02.intmail.prod.int.phx2.redhat.com (8.13.8/8.13.8) with ESMTP id oB9ElIga011390 for ; Thu, 9 Dec 2010 09:47:18 -0500 From: Andreas Schwab To: libc-hacker@sourceware.org Subject: [PATCH] Ignore origin of privileged program X-Yow: PIZZA!! Date: Thu, 09 Dec 2010 14:47:00 -0000 Message-ID: User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/23.2 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Mailing-List: contact libc-hacker-help@sourceware.org; run by ezmlm Precedence: bulk List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: libc-hacker-owner@sourceware.org X-SW-Source: 2010-12/txt/msg00001.txt.bz2 2010-12-09 Andreas Schwab * elf/dl-object.c (_dl_new_object): Ignore origin of privileged program. --- elf/dl-object.c | 3 +++ 1 files changed, 3 insertions(+), 0 deletions(-) diff --git a/elf/dl-object.c b/elf/dl-object.c index 5d15ce1..a34e902 100644 --- a/elf/dl-object.c +++ b/elf/dl-object.c @@ -220,6 +220,9 @@ _dl_new_object (char *realname, const char *libname, int type, out: new->l_origin = origin; } + else if (INTUSE(__libc_enable_secure) && type == lt_executable) + /* The origin of a privileged program cannot be trusted. */ + new->l_origin = (char *) -1; return new; } -- 1.7.2.3 -- Andreas Schwab, schwab@redhat.com GPG Key fingerprint = D4E8 DBE3 3813 BB5D FA84 5EC7 45C6 250E 6F00 984E "And now for something completely different."