[committed] rtld: Add glibc.rtld.enable_secure tunable.

[Joe Simmons-Talbott]

On Thu, Feb 29, 2024 at 3:04 PM Joseph Myers <josmyers@redhat.com> wrote:
>
> On Thu, 29 Feb 2024, Joe Simmons-Talbott wrote:
>
> > diff --git a/NEWS b/NEWS
> > index 2d8eaffc58..19f4e93ea3 100644
> > --- a/NEWS
> > +++ b/NEWS
> > @@ -103,6 +103,11 @@ Major new features:
> >    exp, expf, exp10, exp10f, exp2, exp2f, expm1, expm1f, log, logf,
> >    log10, log10f, log1p, log1pf, log2, log2f, sin, sinf, tan, tanf.
> >
> > +* A new tunable, glibc.rtld.enable_secure, used to run a program
> > +  as if it were a setuid process. This is currently a testing tool to allow
> > +  more extensive verification tests for AT_SECURE programs and not meant to
> > +  be a security feature.
> > +
> >  Deprecated and removed features, and other changes affecting compatibility:
>
> That's the NEWS section for 2.39.  It's not the correct place for any new
> entries for 2.40 features.
>

Crap!  Thanks for catching that.  I'll post a cleanup patch shortly.

Thanks,
Joe
> --
> Joseph S. Myers
> josmyers@redhat.com
>


-- 
Joe Simmons-Talbott