fdlopen()
VinÃcius dos Santos Oliveira <[email protected]> Sat, 19 Oct 2024 11:24:58 -0300
| Newsgroups | dev.linux.lists.landlock |
|---|---|
| Message-ID | <CAK9RveKOvQTP2E-sFTpu7Kq-2rSy3xFPfCUJaF-OzJ0ce5tULw@mail.gmail.com> |
Is there any glibc/musl developer on the list? If so, could you consider taking the case for fdlopen() once more in the development lists? Asking here because Linux libc developers tend to be hostile towards fdlopen() beggars. For my Landlock/seccomp sandboxes (w/o any write permissions to the filesystem... not even /tmp) I'd like to run a few in-memory plugins using fdlopen(). fdlopen() was added to FreeBSD, 13 years ago, and it can be used with memfd/capsicum. A patch to add fdlopen() to musl was sent last year: https://www.openwall.com/lists/musl/2023/05/08/4 Android's bioniC has fdlopen in the form of android_dlopen_ext()/ANDROID_DLEXT_USE_LIBRARY_FD. I can't use Linux namespaces here to mount a writable private /tmp that is shared with no other user as I'd need unprivileged user namespaces support. Landlock can't help me here (nor should). fdlopen() would be ideal. It'd also help me to further unify the interfaces of my software between Linux and FreeBSD as I'd be able to just use fdlopen() on both systems. --=20 Vin=C3=ADcius dos Santos Oliveira https://vinipsmaker.github.io/