Missing security fix in elf/dl-open.c?

Carlos O'Donell carlos@redhat.com
Fri Feb 27 20:41:00 GMT 2015


On 02/27/2015 02:21 PM, Florian Weimer wrote:
> On 02/27/2015 05:43 PM, Carlos O'Donell wrote:
>>> However, something else already does this in Fedora 20
>>> (glibc-2.20-7.fc21.x86_64, which lacks this patch as well AFAICT).  I
>>> created a SUID binary with an $ORIGIN RPATH, and it is ignored, but only
>>> when actually running SUID.
>>
>> Likely the `glibc-fedora-elf-ORIGIN.patch` patch in Fedora.
> 
> Oooh!  Does it mean we should upstream this patch instead?

Yes, and that includes reviewing exactly what it does :-)

c.
 



More information about the Libc-alpha mailing list