Ignore origin of privileged program

diff --git a/ChangeLog b/ChangeLog
index 24ef9e1a95c0f271c0c060bf625c9621d3a3cdb5..b88252046231d7fd8abf42e1173e6e7a949f8596 100644 (file)
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,8 @@
+2010-12-13  Andreas Schwab  <schwab@redhat.com>
+
+       * elf/dl-object.c (_dl_new_object): Ignore origin of privileged
+       program.
+
 2010-10-22  Andreas Schwab  <schwab@redhat.com>
 
        * include/dlfcn.h (__RTLD_SECURE): Define.

diff --git a/elf/dl-object.c b/elf/dl-object.c
index 22a163560b48b3fb6b3a12112f470e550497908f..7674d49c6e55a91fa49a2db50916755e3f876aad 100644 (file)
--- a/elf/dl-object.c
+++ b/elf/dl-object.c
@@ -214,6 +214,9 @@ _dl_new_object (char *realname, const char *libname, int type,
     out:
       new->l_origin = origin;
     }
+  else if (INTUSE(__libc_enable_secure) && type == lt_executable)
+    /* The origin of a privileged program cannot be trusted.  */
+    new->l_origin = (char *) -1;
 
   return new;
 }