nsswitch: do not reload if "/" changes

Florian Weimer fweimer@redhat.com
Tue Jan 19 16:37:09 GMT 2021


* DJ Delorie:

>> Hmm.  Upon second thought, I think this need to be made fail-closed by
>> disabling reload on stat failure.  The two things aren't as unrelated as
>> one might think (chroot + truning on some security filter doesn't seem
>> to be uncommon).  Now of course it's a bit unlikely that anything can be
>> loaded later if / can't be read, but is there a harm in macking this
>> explicity?
>
> Can we reuse the reloadable flag?

The above is about a second issue, disabling reloading in case of stat
failure.  It's independent whether we disable DSO loading or not.

> Or do we need a second independent flag just for dll reloading?  IIRC
> we also use the reloadable flag for test cases that override
> nsswitch.conf, so I would guess no.

I think we could reuse the flag.

Thanks,
Florian
-- 
Red Hat GmbH, https://de.redhat.com/ , Registered seat: Grasbrunn,
Commercial register: Amtsgericht Muenchen, HRB 153243,
Managing Directors: Charles Cachera, Brian Klemm, Laurie Krebs, Michael O'Neill



More information about the Libc-alpha mailing list