[PATCH][v2] Add dynamic linker support for $EXEC_ORIGIN.

Florian Weimer fw@deneb.enyo.de
Thu Oct 26 05:23:00 GMT 2017


* Andreas Schwab:

> On Okt 25 2017, Florian Weimer <fw@deneb.enyo.de> wrote:
>
>> Neither $ORIGIN nor $EXEC_ORIGIN work reliably for Java because the
>> the JIT compiler needs a special SELinux policy, and AT_SECURE
>> disables both linker expansions.
>
> $ORIGIN does work in suid programs.

If I read the code correctly, with upstream glibc, $ORIGIN can only be
used to reorder directories already on the system search path, so its
usefulness is really limited.



More information about the Libc-alpha mailing list