Re: RT linker, rpath and security
Joerg Sonnenberger <[email protected]>
| Newsgroups | gmane.os.netbsd.devel.toolchain |
|---|---|
| Message-ID | <[email protected]> |
Am Thu, May 11, 2023 at 08:09:30AM +0200 schrieb [email protected]: > Isn't it the way a run time linker uses rpath search path a security > risk? You found the reason why many of us object to the use of $ORIGIN. The rpath we build into libraries is explicit and at least pkgsrc will also sanity check the list. Unlike e.g. Windows, the default is to not include $PWD. Joerg