[PATCH] Ignore origin of privileged program

[Jakub Jelinek]

On Fri, Dec 10, 2010 at 09:46:10AM +0100, Andreas Schwab wrote:
> Ulrich Drepper <drepper@gmail.com> writes:
> 
> > On Thu, Dec 9, 2010 at 09:47, Andreas Schwab <schwab@redhat.com> wrote:
> >> 2010-12-09  Andreas Schwab  <schwab@redhat.com>
> >>
> >> Â  Â  Â  Â * elf/dl-object.c (_dl_new_object): Ignore origin of privileged
> >> Â  Â  Â  Â program.
> >
> > The check should also have a whitelist for programs in
> > {,/usr}/lib{,64}, similar to the DSO tests.
> 
> I don't think this is useful.  Libraries are not installed alongside
> programs and privileged programs can only use $ORIGIN exactly.

Well, for some of the iconv modules which use $ORIGIN that is
/usr/lib{,64}/gconv and we certainly need to do something about them,
either stop using $ORIGIN there, or make $ORIGIN be allowed to
/usr/lib{,64}/gconv, etc.