diff options
| author | Ulrich Drepper <drepper@gmail.com> | 2011-05-07 11:44:26 -0400 |
|---|---|---|
| committer | Ulrich Drepper <drepper@gmail.com> | 2011-05-07 11:44:26 -0400 |
| commit | 47c3cd7a74e8c089d60d603afce6d9cf661178d6 (patch) | |
| tree | 8581a6ac64e28564e714bd4022791ae0f38acff7 /ChangeLog | |
| parent | d08055417d0187875806161fab8c4777adfb7ba8 (diff) | |
| download | glibc-47c3cd7a74e8c089d60d603afce6d9cf661178d6.tar.gz glibc-47c3cd7a74e8c089d60d603afce6d9cf661178d6.tar.xz glibc-47c3cd7a74e8c089d60d603afce6d9cf661178d6.zip | |
Allow $ORIGIN to reference trusted directoreis in SUID binaries.
Diffstat (limited to 'ChangeLog')
| -rw-r--r-- | ChangeLog | 10 |
1 files changed, 10 insertions, 0 deletions
diff --git a/ChangeLog b/ChangeLog index d7bb7340d0..e93c9a5643 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,3 +1,13 @@ +2011-05-07 Petr Baudis <pasky@suse.cz> + Ulrich Drepper <drepper@gmail.com> + + [BZ #12393] + * elf/dl-load.c (fillin_rpath): Move trusted path check... + (is_trusted_path): ...to here. + (is_norm_trusted_path): Add wrapper for /../ and /./ normalization. + (_dl_dst_substitute): Verify expanded $ORIGIN path elements + using is_norm_trusted_path() in setuid scripts. + 2011-05-06 Paul Pluzhnikov <ppluzhnikov@google.com> * sysdeps/unix/sysv/linux/sys/sysmacros.h: Add missing |