diff options
| author | Dag-Erling Smørgrav <des@FreeBSD.org> | 2025-12-03 10:09:31 +0000 |
|---|---|---|
| committer | Dag-Erling Smørgrav <des@FreeBSD.org> | 2025-12-05 15:08:55 +0000 |
| commit | 74b10f0b57600dffa4eb81eaa40dbbfb8c5c3a1f (patch) | |
| tree | ff0ebe4d886b80641d23bb5b26cabf54907d40fb | |
| parent | 68c9bf7b2c8ab9f0860966d4c4079ecba140fe54 (diff) | |
rtld-elf: Mark LD_SHOW_AUXV insecure
This prevents dumping the memory layout of setugid processes.
MFC after: 3 days
Reviewed by: kib
Differential Revision: https://reviews.freebsd.org/D54033
(cherry picked from commit 5242bcff202fa2a5a39895423c8d8c11c02ad76a)
| -rw-r--r-- | libexec/rtld-elf/rtld.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/libexec/rtld-elf/rtld.c b/libexec/rtld-elf/rtld.c index bdfff7361e96..8ac897508870 100644 --- a/libexec/rtld-elf/rtld.c +++ b/libexec/rtld-elf/rtld.c @@ -395,7 +395,7 @@ static struct ld_env_var_desc ld_env_vars[] = { LD_ENV_DESC(TRACE_LOADED_OBJECTS_FMT1, false), LD_ENV_DESC(TRACE_LOADED_OBJECTS_FMT2, false), LD_ENV_DESC(TRACE_LOADED_OBJECTS_ALL, false), - LD_ENV_DESC(SHOW_AUXV, false), + LD_ENV_DESC(SHOW_AUXV, true), LD_ENV_DESC(STATIC_TLS_EXTRA, false), LD_ENV_DESC(NO_DL_ITERATE_PHDR_AFTER_FORK, false), }; |