tech-toolchain archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Re: RT linker, rpath and security





On 11/05/23 20:37, Martin Husemann wrote:
On Thu, May 11, 2023 at 10:22:08AM +0200, tlaronde%polynum.com@localhost wrote:
Would you mind specifying what "admin decisions" you are referring to?

Installing a binary with an untrusted RPATH or making some directories
writable that should not be.


I would include whoever wrote "the Makefile" as an admin decision maker.

I would report any RPATH problems to whoever wrote "the Makefile" as a security bug, after all that is the source of the problem. Maybe with some advice on how to do it right could be added.

Cheers,
Lloyd


Home | Main Index | Thread Index | Old Index