diff options
| author | Mark Johnston <markj@FreeBSD.org> | 2026-06-02 20:29:00 +0000 |
|---|---|---|
| committer | Mark Johnston <markj@FreeBSD.org> | 2026-06-08 13:21:34 +0000 |
| commit | 547fc2a98a24129b12c573531130630f162c1cdd (patch) | |
| tree | d2a97ef2a2d5385578937bf0b70412fc58320d9c /lib/libnetmap | |
| parent | 889e306ded217659e25516c05265591aa17d4544 (diff) | |
imgact_elf: Clear no-ASLR and -WXORX flags earlier for setugid images
Otherwise an unprivileged user can disable randomization of the base
address for PIEs even if they are setugid.
Add a regression test.
Approved by: so
Security: FreeBSD-SA-26:32.elf
Security: CVE-2026-49414
Reported by: David Berard
Reviewed by: kib
Sponsored by: The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D57397
Diffstat (limited to 'lib/libnetmap')
0 files changed, 0 insertions, 0 deletions