[PATCH] Ignore LD_POINTER_GUARD for set-user-ID/set-group-ID binaries.

[Joseph Myers]

On Mon, 19 Oct 2015, Hector Marco-Gisbert wrote:

> 4.- The CVE can be assigned or not, it depends on many factors, we don't care
> that much. But it is obvious that our contribution have been used to improve
> the security of the Glibc, and then it must be properly credited.

Isn't the normal credit for a bug reported in public (whether or not a 
security bug): the bug number is referenced in the ChangeLog and the 
commit message, and anyone can follow that reference back to see who 
reported the bug?  I would hope that databases of CVEs would also point 
directly to the bug report in Bugzilla, not just the commit fixing the 
bug.

-- 
Joseph S. Myers
joseph@codesourcery.com