[PATCH] Never leave $ORIGIN unexpanded

[Dmitry V. Levin]

On Tue, Dec 29, 2015 at 05:31:08PM -0500, Mike Frysinger wrote:
> On 29 Dec 2015 20:42, Dmitry V. Levin wrote:
> >  This change started its life as commit 207e77fd3f0a94acdf0557608dd4f10ce0e0f22f,
> >  it's in wide use, it was rebased and reviewed several times.
> 
> where ?

It's in Fedora since glibc-2.13.90-12 (13.05.2011).
I reviewed it twice at least.

> links to discussions would be helpful,

It's a follow-up to the series of commits made to fix
https://sourceware.org/bugzilla/show_bug.cgi?id=12393

I have no idea why it remained in fedora branch and hasn't been merged
to master.

> as would a more verbose explanation.

The idea is, as the subject says, never to leave $ORIGIN unexpanded:
if a privileged executable's rpath element contains $ORIGIN in a position
that is not allowed for expansion in privileged executables, this rpath
element shouldn't be left as is, it should be discarded.


-- 
ldv
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 819 bytes
Desc: not available
URL: <http://sourceware.org/pipermail/libc-alpha/attachments/20151229/7a16d1d0/attachment.sig>