Le 21/10/2013 09:38, Theo de Raadt a écrit :
I don't get what's wrong with running execve on it. In all cases,
someone can load it through another executable.
Using ld.so does not imply "execve'ing it".
If I have an interpreter that I chmod as exec-only, I want this
interpreter to be world-loadable without thereby letting other
users copy it. The same for a library.
It is loadable. Because it is readable.
I said "exec-only", so no it is not readable and not loadable.
My point was that, actually, it should be loadable.
But after sleeping a bit, I figured out that there may indeed be
some issues with some libraries.
To me it looks weird. I'm gonna investigate a bit, and if I have
an objection I'll send it here.
Until then, sorry for the noise.
