Bug#963508: /lib/ld-linux.so.2: LD_PRELOAD breaks with plain filename [and 1 more messages]

2020-06-24 Thread Florian Weimer
* Aurelien Jarno: >> This doesn't seem correct to me. Is there any documentation giving a >> rationale for this ? Is there a way to change this locally ? > > I do not know enough about apparmor and its threat model to know if it > should be considered or not. From the glibc point of view,

Bug#963508: /lib/ld-linux.so.2: LD_PRELOAD breaks with plain filename [and 1 more messages]

2020-06-23 Thread Aurelien Jarno
On 2020-06-23 14:17, Ian Jackson wrote: > > Aurelien Jarno writes ("Re: Bug#963508: /lib/ld-linux.so.2: LD_PRELOAD breaks > with plain filename"): > > [stuff] > > Thanks for your explanations and sorry for being dense. > > > In secure-execution mo

Bug#963508: /lib/ld-linux.so.2: LD_PRELOAD breaks with plain filename [and 1 more messages]

2020-06-23 Thread Ian Jackson
Aurelien Jarno writes ("Re: Bug#963508: /lib/ld-linux.so.2: LD_PRELOAD breaks with plain filename"): > [stuff] Thanks for your explanations and sorry for being dense. > In secure-execution mode, preload pathnames containing slashes are > ignored. Furthermore, shared ob

Bug#963508: /lib/ld-linux.so.2: LD_PRELOAD breaks with plain filename

2020-06-23 Thread Aurelien Jarno
On 2020-06-23 12:21, Ian Jackson wrote: > Aurelien Jarno writes ("Re: Bug#963508: /lib/ld-linux.so.2: LD_PRELOAD breaks > with plain filename"): > > On 2020-06-23 11:46, Ian Jackson wrote: > > > Should apparmor make a difference between absolute paths and leafnames

Bug#963508: /lib/ld-linux.so.2: LD_PRELOAD breaks with plain filename

2020-06-23 Thread Ian Jackson
Aurelien Jarno writes ("Re: Bug#963508: /lib/ld-linux.so.2: LD_PRELOAD breaks with plain filename"): > On 2020-06-23 11:46, Ian Jackson wrote: > > Should apparmor make a difference between absolute paths and leafnames > > in LD_PRELOAD ? Because I can repr

Bug#963508: /lib/ld-linux.so.2: LD_PRELOAD breaks with plain filename

2020-06-23 Thread Aurelien Jarno
On 2020-06-23 11:46, Ian Jackson wrote: > Aurelien Jarno writes ("Re: Bug#963508: /lib/ld-linux.so.2: LD_PRELOAD breaks > with plain filename"): > > You probably have apparmor installed and enabled on your system. > > Binaries that are run with an apparmor profile get

Bug#963508: /lib/ld-linux.so.2: LD_PRELOAD breaks with plain filename

2020-06-23 Thread Colin Watson
On Tue, Jun 23, 2020 at 11:46:58AM +0100, Ian Jackson wrote: > Aurelien Jarno writes ("Re: Bug#963508: /lib/ld-linux.so.2: LD_PRELOAD breaks > with plain filename"): > > You probably have apparmor installed and enabled on your system. > > Binaries that are run

Bug#963508: /lib/ld-linux.so.2: LD_PRELOAD breaks with plain filename

2020-06-23 Thread Ian Jackson
Aurelien Jarno writes ("Re: Bug#963508: /lib/ld-linux.so.2: LD_PRELOAD breaks with plain filename"): > You probably have apparmor installed and enabled on your system. > Binaries that are run with an apparmor profile get AT_SECURE enabled, > which disables many features

Bug#963508: /lib/ld-linux.so.2: LD_PRELOAD breaks with plain filename

2020-06-22 Thread Aurelien Jarno
On 2020-06-22 19:00, Ian Jackson wrote: > Package: libc6 > Version: 2.28-10 > Severity: normal > File: /lib/ld-linux.so.2 > > Hi. I found this behaviour: > > $ eatmydata man ls >/dev/null > ERROR: ld.so: object 'libeatmydata.so' from LD_PRELOAD cannot be preloaded > (cannot open shared object

Bug#963508: /lib/ld-linux.so.2: LD_PRELOAD breaks with plain filename

2020-06-22 Thread Ian Jackson
Package: libc6 Version: 2.28-10 Severity: normal File: /lib/ld-linux.so.2 Hi. I found this behaviour: $ eatmydata man ls >/dev/null ERROR: ld.so: object 'libeatmydata.so' from LD_PRELOAD cannot be preloaded (cannot open shared object file): ignored. ERROR: ld.so: object 'libeatmydata.so' from