[Bug libc/11570] New: RPATH $ORIGIN fails in programs with capabilities set

["david dot lloyd at redhat dot com" <sourceware-bugzilla at sourceware dot org>]

Executable files with an RPATH which contains $ORIGIN fail to dynamically link
when a capability is set on the file.  Rather than replacing $ORIGIN as
expected, the string $ORIGIN is preserved as-is in the search path.  The only
workaround I am aware of is to use a program like patchelf to manually expand
the value first.

There is a self-contained test case here:
https://bugs.launchpad.net/ubuntu/+source/glibc/+bug/565002

Also related is this Java bug:
http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=6919633

The common practical difficulty is that this makes it impossible for Java to be
granted CAP_NET_BIND_SERVICE.

-- 
           Summary: RPATH $ORIGIN fails in programs with capabilities set
           Product: glibc
           Version: 2.10
            Status: NEW
          Severity: normal
          Priority: P2
         Component: libc
        AssignedTo: drepper at redhat dot com
        ReportedBy: david dot lloyd at redhat dot com
                CC: glibc-bugs at sources dot redhat dot com


http://sourceware.org/bugzilla/show_bug.cgi?id=11570

------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.