RFC: Should the linker warn about and/or control the propagation of audit libraries ?

[Siddhesh Poyarekar]

On 2026-07-30 07:14, Nick Clifton wrote:
> Hi Sam,
> 
>> I'm not sure I see a problem: the same issue exists with ELF
>> constructors without DT_AUDIT.
> 
> Do these constructors have the potential to intercept and change
> symbol resolution though ?  I think that the issue is that audit
> libraries are potentially able to perform very low level manipulation
> of the run time environment, and so should be used with caution.

On the security question: inputs to the linker are assumed to be 
trusted, so this is not really a security issue from that angle.  Is 
there a good case (regardless of the security question) to provide a 
flag to disable propogation of DT_AUDIT?  Sure, why not.

Sid