Re: RFC: Should the linker warn about and/or control the propagation of audit libraries ?

Matt Rice <[email protected]> Thu, 30 Jul 2026 14:28:35 -0700
Newsgroups gmane.comp.gnu.binutils
Message-ID <CACTLOFqCEDw7TA9xoNWO+3N5Ds32EJHKP_STaPi3KVCBw02jJQ@mail.gmail.com>
> On Thu, Jul 30, 2026 at 4:15=E2=80=AFAM Nick Clifton <[email protected]> w=
rote:
> >
> > Hi Sam,
> >
> > > I'm not sure I see a problem: the same issue exists with ELF
> > > constructors without DT_AUDIT.
> >
> > Do these constructors have the potential to intercept and change
> > symbol resolution though ?  I think that the issue is that audit
> > libraries are potentially able to perform very low level manipulation
> > of the run time environment, and so should be used with caution.
> >
> >
> > > That said, the use of DT_AUDIT is so unusual that I'd find a message
> > > about it slightly interesting.
> >
> > I must admit that I would be interested in seeing if there any
> > projects out there that are using audit libraries for anything
> > other than debugging or profiling purposes.
>

I pushed a quickly updated version of the project to codeberg...

https://codeberg.org/ratmice/framework-gccplugin

It isn't fully working as expected but 99% or so...
For some reason executing the binary works, but ldd does not,
but likely a glibc issue, haven't probably won't have time for
debugging ld.so any time soon.


>
> > Cheers
> >    Nick
> >
> >
> >