Re: RT linker, rpath and security
Lloyd Parkes <[email protected]>
| Newsgroups | gmane.os.netbsd.devel.toolchain |
|---|---|
| Message-ID | <[email protected]> |
On 11/05/23 20:37, Martin Husemann wrote: > On Thu, May 11, 2023 at 10:22:08AM +0200, [email protected] wrote: >> Would you mind specifying what "admin decisions" you are referring to? > > Installing a binary with an untrusted RPATH or making some directories > writable that should not be. > I would include whoever wrote "the Makefile" as an admin decision maker. I would report any RPATH problems to whoever wrote "the Makefile" as a security bug, after all that is the source of the problem. Maybe with some advice on how to do it right could be added. Cheers, Lloyd