From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mail-wm1-f52.google.com (mail-wm1-f52.google.com [209.85.128.52]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 04CCA3DE431 for ; Tue, 30 Jun 2026 17:59:19 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=209.85.128.52 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1782842361; cv=none; b=WyFiom2K0uGKgaEuZNTH01sRh7aEWqS8bttalLh+TIJ2SxhGe6fP9JNBC8V0gICmToHE1o1jhT+cVtVzwEWSx8Yb0yv3NFDfBOQsKWVG00J+igstj90mip4mpKuXgQTsG4OEsIf4aNykZH70JdbKIkkMrzGnkVwVSXGA0nqz3Pc= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1782842361; c=relaxed/simple; bh=x9CMoGNkZpcb4ai0XShbV9IZQjov/vBIzAOp2ZoeIDc=; h=Date:From:To:Cc:Subject:Message-ID:In-Reply-To:References: MIME-Version:Content-Type; b=qoDmXf3G63/rgRZsXU4bhkiDeRmsnhGqBXRaLs/nNLcSWE1eR6ZWRmUq+/SM+7K0Ssk3uPS0yGhjqrRdPUA+QlyBYPzj3ScHG51gzmoRkydaVxCiNVO6bvaNlSLpJqbqs9Tukin0MmSfOUxwaL5DA1qzR5586IMHSgYS8uGdNnc= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=gmail.com; spf=pass smtp.mailfrom=gmail.com; dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b=ahNkuyAu; arc=none smtp.client-ip=209.85.128.52 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=gmail.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=gmail.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b="ahNkuyAu" Received: by mail-wm1-f52.google.com with SMTP id 5b1f17b1804b1-493b1710405so13689775e9.2 for ; Tue, 30 Jun 2026 10:59:19 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1782842358; x=1783447158; darn=vger.kernel.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:subject:cc:to:from:date:from:to:cc:subject:date :message-id:reply-to; bh=Us+CXl62OP+IHnxEOFdUPPagDbtagb/X32b+PDoHuVk=; b=ahNkuyAueIUHdlOuQ1dTLfGjq55Pcn51cuxihj/JIuLwmHYRdVcgPVm/3R6tKKIncb 7eh7uCE3T5faBurKc6TS10BbKlJ49lsJVLgqDPnPYj57UHx7X8NYN6y+LvKvZgGW1Jgx p7CFuMYuQGJje+Ql69a9+0wQTg8gR+twSLu+Nte04j+cmuV4LPQ4QR7yhl2si/KgfDtO e+VtNv5CydfInL2RsWtglHCshIDIbgQA7BcoZoTDD4LZDgsfy0rlB7CekFxn5V97FuIN wLXSi3zGSfPLbKHAdtRujUt7cw+lb1ICDKf1qh9YRzPwxPacyeLOvZ4swNMpOw9JgoN9 9COA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1782842358; x=1783447158; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:subject:cc:to:from:date:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to; bh=Us+CXl62OP+IHnxEOFdUPPagDbtagb/X32b+PDoHuVk=; b=qql6Z4RuCLiXOjQ6Hpw55ZCH0zw4lslS+bSZC0AkhuZeWHttrxql0xaL+Cn1VJAXAX fL8rAI47ZlQElMmG8buTa2iz6FE38rczIUPex385YdMrJOYGJ1lP+13LBPMOXRAHpwI5 XPRXj53WQiCPkvJ2oS0b7aDbc3p05hvjSz3yxAhWIWAipHLJECmuLtupHSSiLCocaqTg uD5KkkRM4fOY5X6RuCra2DOLELUzkXHwu8dXwCc5y5iL6ozrJ8MqbriOMJDTUim39RTr 3npaj4gidfhmkqATkm4OSnB097sPgzA3C+6eeQKcx00LYIURJZqFkTp/u5ce3n+8Rzyk fHhw== X-Forwarded-Encrypted: i=1; AFNElJ+cZKla+X2Kxd4j1eq3jxtMl4FXoKQvCjrh4rX654c1ocriYQ/FCltVLb/B4jBA1f9li+oMjNoYFpqe2ok=@vger.kernel.org X-Gm-Message-State: AOJu0YxthyyD3yl5eoEXlfcvIGuOfRM2S4yLbtZcuQTSYs1TBnsdsbvv +f9RbMZD5Xg8IbozsX8zsowYWeaYi+VEec9x8rY/KrTOPLcI3cVjYC+Y X-Gm-Gg: AfdE7cmK0kQcttkLeXoDvRGFSp4ECaRmfdKxWK/qwXKRSpdafP7bd+qj402nNswwVqN TIbG15cLGtlxLuhtxSa4hupFoNi6ZjiU6+mjPof6wZwkg8f+FMXKQrB2J7aHzEqQv0Za+DHio5C vQhZQx0i9Tak/w5q8hNtnlNxiYO3b49Uw1XRpR7E4jYGu9issgIGBCq5ua9xXgxZaXEMcSOOmPC 4bAb665pczgxmYZ/xyrotPWDOUo0llkruwKJeVPfhOhgMwPJlukk79BhyrRe3Aw09XS9P03ayER uoVAHwh0qIqMKHerskCGZlZS1jPTfjndTxw6LDUrJYyQbR8VKVlxmppjUVy1ltVtYhOVgpieEQy KSrQFO2M9cRSgPt9lDygfTxTxkARBRkoGbZP8VTVqLigeiSpHK4/XEH+v+3jvqIQpQevv7rFfCA zpMYWtYXSPBAHCvonEJPKJEQv3YGE/SPhBsj/e30dwzUUPLg== X-Received: by 2002:a05:600c:a06:b0:493:b811:e549 with SMTP id 5b1f17b1804b1-493b82b61fcmr66519375e9.29.1782842358265; Tue, 30 Jun 2026 10:59:18 -0700 (PDT) Received: from pumpkin (host-92-21-50-228.as13285.net. [92.21.50.228]) by smtp.gmail.com with ESMTPSA id 5b1f17b1804b1-493be4c7f90sm11943955e9.2.2026.06.30.10.59.17 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 30 Jun 2026 10:59:17 -0700 (PDT) Date: Tue, 30 Jun 2026 18:59:16 +0100 From: David Laight To: Christian Brauner Cc: Jann Horn , John Ericson , Farid Zakaria , Jan Kara , Kees Cook , Al Viro , shuah@kernel.org, linux-fsdevel , linux-mm , linux-kselftest , LKML Subject: Re: [PATCH 0/2] fs: support $ORIGIN in ELF interpreter paths Message-ID: <20260630185916.5a694895@pumpkin> In-Reply-To: <20260628-debatten-vertagen-amortisieren-3bf518773e75@brauner> References: <20260622043934.179879-1-farid.m.zakaria@gmail.com> <24420045-a6eb-4999-ab19-1e344eaba8a4@app.fastmail.com> <20260625-atomkraftgegner-hunger-kursbuch-b452ff2becab@brauner> <20260628-ungeordnet-orgel-stechen-36dd64038541@brauner> <20260628-debatten-vertagen-amortisieren-3bf518773e75@brauner> X-Mailer: Claws Mail 4.1.1 (GTK 3.24.38; arm-unknown-linux-gnueabihf) Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit On Sun, 28 Jun 2026 15:20:11 +0200 Christian Brauner wrote: ... > In a way we have been doing something in systemd that goes in a similar > direction. As of systemd 261 systemd _only_ links against libc and nothing > else. > > Any other shared library is dlopen()ened as needed (discoverable via > elf-notes). Lennart wrote about this just a few days ago: > https://mastodon.social/@pid_eins/116781776665322560 > > This effectively minimizes the work the loader has to do at startup. Imho, your > effort with wrap-buddy is related. To me moving the loader invocation out of > the kernel and into userspace makes a lot of sense to me. I've done that for libraries that a program doesn't normally need. But it doesn't make sense for a long-lived daemon. The work almost certainly needs doing at some point. The other problem is that it is hard to handle symbol versioning. So the function you get may not match the one the header file defined and you suffer the consequences. David