From: Andreas Schwab <schwab@redhat.com>
Date: Thu, 9 Dec 2010 14:00:59 +0000 (+0100)
Subject: Ignore origin of privileged program
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=96611391ad8823ba58405325d78cefeae5cdf699;p=thirdparty%2Fglibc.git

Ignore origin of privileged program
---

diff --git a/ChangeLog b/ChangeLog
index 445600e2950..c9738066de2 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,8 @@
+2010-12-13  Andreas Schwab  <schwab@redhat.com>
+
+	* elf/dl-object.c (_dl_new_object): Ignore origin of privileged
+	program.
+
 2010-11-11  Andreas Schwab  <schwab@redhat.com>
 
 	* posix/fnmatch_loop.c (NEW_PATTERN): Fix use of alloca.
diff --git a/elf/dl-object.c b/elf/dl-object.c
index 5d15ce1869b..a34e9029834 100644
--- a/elf/dl-object.c
+++ b/elf/dl-object.c
@@ -220,6 +220,9 @@ _dl_new_object (char *realname, const char *libname, int type,
     out:
       new->l_origin = origin;
     }
+  else if (INTUSE(__libc_enable_secure) && type == lt_executable)
+    /* The origin of a privileged program cannot be trusted.  */
+    new->l_origin = (char *) -1;
 
   return new;
 }