On 2026-09-04 2:17 AM, Florian Weimer wrote:
https://codeberg.org/gordonmessmer/got-audit-pipeline
https://codeberg.org/gordonmessmer/got-audit
Does this light up on Red Hat's build of Fedora? It has heavy run-time
patching of libc.so.6, apparently.
I'm not sure what you mean by run-time patching... There are libraries
in Fedora like libattr.so and libtirpc.so that provide identically named
functions as functions in libc.so (although, with different symbol
versions). The scanner does look for libraries that export identical
function names, which might be a sign of function hijacking, but it has
an allow-list for functions in a few libraries. I think that needs a
better and more generalized approach.
Are you referring to some other run-time patching?
--
_______________________________________________
devel mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam, report it:
https://forge.fedoraproject.org/infra/tickets/issues/new
