fdlopen()

Vinícius dos Santos Oliveira <[email protected]> Sat, 19 Oct 2024 11:24:58 -0300
Newsgroups dev.linux.lists.landlock
Message-ID <CAK9RveKOvQTP2E-sFTpu7Kq-2rSy3xFPfCUJaF-OzJ0ce5tULw@mail.gmail.com>
Is there any glibc/musl developer on the list? If so, could you
consider taking the case for fdlopen() once more in the development
lists? Asking here because Linux libc developers tend to be hostile
towards fdlopen() beggars.

For my Landlock/seccomp sandboxes (w/o any write permissions to the
filesystem... not even /tmp) I'd like to run a few in-memory plugins
using fdlopen().

fdlopen() was added to FreeBSD, 13 years ago, and it can be used with
memfd/capsicum.

A patch to add fdlopen() to musl was sent last year:
https://www.openwall.com/lists/musl/2023/05/08/4

Android's bioniC has fdlopen in the form of
android_dlopen_ext()/ANDROID_DLEXT_USE_LIBRARY_FD.

I can't use Linux namespaces here to mount a writable private /tmp
that is shared with no other user as I'd need unprivileged user
namespaces support. Landlock can't help me here (nor should).
fdlopen() would be ideal.

It'd also help me to further unify the interfaces of my software
between Linux and FreeBSD as I'd be able to just use fdlopen() on both
systems.


--=20
Vin=C3=ADcius dos Santos Oliveira
https://vinipsmaker.github.io/