* Simon de Vlieger: > On Wed, Oct 28, 2026, at 6:47 PM, Florian Weimer via devel wrote: >> The upstream Rust security team has not documented that Rust is safe to >> use in SUID binaries, and the standard library (and therefore most >> crates) do not take this special operating environment into >> consideration. > > Aside from the dependencies; do languages for current SUID binaries document > that they are safe to use in SUID contexts? Seems like a funky hurdle to > impose. :)
It's documented for the C library. Not in glibc manual, but for example in Garfinkel and Spafford, Partical UNIX and Internet Security. The second edition has an entire chapter, Writing Secure SUID and Network Programs. Thanks, Florian -- _______________________________________________ devel mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/[email protected] Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new
