[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]
On Sun, Jan 26, 2014 at 11:54:07AM +0000, David Laight wrote:
> The problem with caching the path is that it might contain symlinks
> that the user can change - which means that it isn't save to use
> $ORIGIN in suid binaries.
> Whereas the kernel has vnode of the directory where the file has found,
> so should be able to refcount it. An open relative to that vnode is
> safe (and fast) even for suid programs.
Unfortunately, the ELF $ORIGIN doesn't work that way.
David A. Holland
Main Index |
Thread Index |