Ignore origin of privileged program

diff --git a/ChangeLog b/ChangeLog
index 445600e2950fcdc5a02ba1ccd688195dd0ef83b9..c9738066de2520dede05f84c2c0c9fe2a1d1dae5 100644 (file)
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,8 @@
+2010-12-13  Andreas Schwab  <schwab@redhat.com>
+
+       * elf/dl-object.c (_dl_new_object): Ignore origin of privileged
+       program.
+
 2010-11-11  Andreas Schwab  <schwab@redhat.com>
 
        * posix/fnmatch_loop.c (NEW_PATTERN): Fix use of alloca.

diff --git a/elf/dl-object.c b/elf/dl-object.c
index 5d15ce1869b6305f828b409e9edeebf448b50641..a34e902983440206a4a2fe6955dc9d4a7738afc5 100644 (file)
--- a/elf/dl-object.c
+++ b/elf/dl-object.c
@@ -220,6 +220,9 @@ _dl_new_object (char *realname, const char *libname, int type,
     out:
       new->l_origin = origin;
     }
+  else if (INTUSE(__libc_enable_secure) && type == lt_executable)
+    /* The origin of a privileged program cannot be trusted.  */
+    new->l_origin = (char *) -1;
 
   return new;
 }