diff options
| author | Dag-Erling Smørgrav <des@FreeBSD.org> | 2025-12-03 10:09:31 +0000 |
|---|---|---|
| committer | Dag-Erling Smørgrav <des@FreeBSD.org> | 2025-12-05 18:28:45 +0000 |
| commit | ef8a5af2a3ec6ae1ade610ce0c33298eb6cd3bae (patch) | |
| tree | 0c0fc7e7cd49e77e1deefe8566d8cb02ac05eb99 | |
| parent | 5b084744bb212e2783ffca8b8d332e40df9b6b02 (diff) | |
rtld-elf: Mark LD_SHOW_AUXV insecure
This prevents dumping the memory layout of setugid processes.
MFC after: 3 days
Reviewed by: kib
Differential Revision: https://reviews.freebsd.org/D54033
(cherry picked from commit 5242bcff202fa2a5a39895423c8d8c11c02ad76a)
| -rw-r--r-- | libexec/rtld-elf/rtld.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/libexec/rtld-elf/rtld.c b/libexec/rtld-elf/rtld.c index 7110ba6c4c1a..cbf4baa1aee9 100644 --- a/libexec/rtld-elf/rtld.c +++ b/libexec/rtld-elf/rtld.c @@ -400,7 +400,7 @@ static struct ld_env_var_desc ld_env_vars[] = { LD_ENV_DESC(TRACE_LOADED_OBJECTS_FMT1, false), LD_ENV_DESC(TRACE_LOADED_OBJECTS_FMT2, false), LD_ENV_DESC(TRACE_LOADED_OBJECTS_ALL, false), - LD_ENV_DESC(SHOW_AUXV, false), + LD_ENV_DESC(SHOW_AUXV, true), LD_ENV_DESC(STATIC_TLS_EXTRA, false), }; |