On Fri, Oct 30, 2026 at 01:51:01PM +0000, Richard W.M. Jones via devel wrote: > On Thu, Oct 29, 2026 at 12:54:54PM +0100, Fabio Valentini wrote: > > On Wed, Oct 28, 2026 at 6:47 PM Florian Weimer via devel > > <[email protected]> wrote: > > > > > > * Aoife Moloney via devel-announce: > > > > > > > The privilege-separated design is preserved and sharpened: the only > > > > setuid-root binary is `userhelper`, kept to PAM calls, privilege > > > > transitions, and `exec`. > > > > > > It his binary written in Rust? > > > > > > The upstream Rust security team has not documented that Rust is safe to > > > use in SUID binaries, and the standard library (and therefore most > > > crates) do not take this special operating environment into > > > consideration. > > > > Can you elaborate what you mean here? I don't really see a connection > > between programming language and SUID use. And I don't see how the > > Rust standard library plays any role here either - it contains zero > > functionality related to unix user / group support. > > It's things like, does the runtime detect when it is being run as SUID > and clean out / refuse to use environment variables (such as > LD_PRELOAD). A lot of this comes from the C library, so if Rust is > using glibc then that's a good start, but I guess the language itself > (or more likely, Rust-specific libraries) might require attention too. > > As Florian hinted, a great deal of this is unwritten knowledge and/or > learnings from decades of security incidents.
And don't take this to mean that I'm opposed to the proposal. If you really have to do SUID, using a memory safe language is a good idea. Rich. -- Richard Jones, Virtualization Group, Red Hat http://people.redhat.com/~rjones Read my programming and virtualization blog: http://rwmj.wordpress.com libguestfs lets you edit virtual machines. Supports shell scripting, bindings from many languages. http://libguestfs.org -- _______________________________________________ devel mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/[email protected] Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new
