* LD_DEBUG issue
@ 2004-09-02 19:02 Joshua Brindle
0 siblings, 0 replies; only message in thread
From: Joshua Brindle @ 2004-09-02 19:02 UTC (permalink / raw)
To: SELinux
see http://lwn.net/Articles/99137 first for an overview.
Now, we (Gentoo) have this fixed in our glibc to disallow LD_DEBUG on
suid binaries but i believe it is necessary to add this to AT_SECURE so
that we can prevent this kind of info leak during domain transitions,
What do you guys think?
Joshua Brindle
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
^ permalink raw reply [flat|nested] only message in thread
only message in thread, other threads:[~2004-09-02 19:03 UTC | newest]
Thread overview: (only message) (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2004-09-02 19:02 LD_DEBUG issue Joshua Brindle
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.