Re: RT linker, rpath and security

[Joerg Sonnenberger <joerg%bec.de@localhost>]

Am Thu, May 11, 2023 at 08:09:30AM +0200 schrieb tlaronde%polynum.com@localhost:
> Isn't it the way a run time linker uses rpath search path a security
> risk?

You found the reason why many of us object to the use of $ORIGIN. The
rpath we build into libraries is explicit and at least pkgsrc will also
sanity check the list. Unlike e.g. Windows, the default is to not
include $PWD.

Joerg