[PATCH] RFC: Provide a function to reset IFUNC PLTs

[Jan Kratochvil]

On Tue, 07 Mar 2023 21:07:58 +0800, Adhemerval Zanella Netto wrote:
> I am not sure if the ifunc reset will be really safe without adding CRIU
> migrate sync points, to avoid suspend execution in a context that the
> ifunc variants are already being executed or its address is being in a
> function point (for instance in PLT code).

You are right but I left the thread safety up to the caller ("Freezer"):
	https://github.com/openjdk/crac/pull/41/files#diff-aeec57d804d56002f26a85359fc4ac8b48cfc249d57c656a30a63fc6bf3457adR6029

It could be moved to the glibc part.


> Besides, I also not sure if adding way to remove RELRO protection won't
> add more security issues (we can disable for sesuid binaries, but even
> though it is not a good security practice).

RELRO is removed only temporarily, it gets re-engaged. And that time other
threads should be even stopped (see above). Is it still a security issues?


Thanks,
Jan