jyapayne/musl
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

security hardening: ensure suid programs have valid stdin/out/err

Browse source 
this behavior (opening fds 0-2 for a suid program) is explicitly
allowed (but not required) by POSIX to protect badly-written suid
programs from clobbering files they later open.

this commit does add some cost in startup code, but the availability
of auxv and the security flag will be useful elsewhere in the future.
in particular auxv is needed for static-linked vdso support, which is
still waiting to be committed (sorry nik!)
This commit is contained in:
Rich Felker 2011-08-23 09:37:39 -04:00
commit df0b5a4940
6 changed files with 52 additions and 15 deletions
Download patch file Download diff file Expand all files Collapse all files

5
arch/i386/atomic.h
View file

@ -119,5 +119,10 @@ static inline void a_spin()
__asm__ __volatile__( "pause" : : : "memory" );
}
static inline void a_crash()
{
__asm__ __volatile__( "hlt" : : : "memory" );
}
#endif

5
arch/x86_64/atomic.h
View file

@ -118,5 +118,10 @@ static inline void a_spin()
__asm__ __volatile__( "pause" : : : "memory" );
}
static inline void a_crash()
{
__asm__ __volatile__( "hlt" : : : "memory" );
}
#endif