aboutsummaryrefslogtreecommitdiff
path: root/ChangeLog
diff options
context:
space:
mode:
authorUlrich Drepper <drepper@gmail.com>2011-05-07 11:44:26 -0400
committerUlrich Drepper <drepper@gmail.com>2011-05-07 11:44:26 -0400
commit47c3cd7a74e8c089d60d603afce6d9cf661178d6 (patch)
tree8581a6ac64e28564e714bd4022791ae0f38acff7 /ChangeLog
parentd08055417d0187875806161fab8c4777adfb7ba8 (diff)
downloadglibc-47c3cd7a74e8c089d60d603afce6d9cf661178d6.zip
glibc-47c3cd7a74e8c089d60d603afce6d9cf661178d6.tar.gz
glibc-47c3cd7a74e8c089d60d603afce6d9cf661178d6.tar.bz2
Allow $ORIGIN to reference trusted directoreis in SUID binaries.
Diffstat (limited to 'ChangeLog')
-rw-r--r--ChangeLog10
1 files changed, 10 insertions, 0 deletions
diff --git a/ChangeLog b/ChangeLog
index d7bb734..e93c9a5 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,13 @@
+2011-05-07 Petr Baudis <pasky@suse.cz>
+ Ulrich Drepper <drepper@gmail.com>
+
+ [BZ #12393]
+ * elf/dl-load.c (fillin_rpath): Move trusted path check...
+ (is_trusted_path): ...to here.
+ (is_norm_trusted_path): Add wrapper for /../ and /./ normalization.
+ (_dl_dst_substitute): Verify expanded $ORIGIN path elements
+ using is_norm_trusted_path() in setuid scripts.
+
2011-05-06 Paul Pluzhnikov <ppluzhnikov@google.com>
* sysdeps/unix/sysv/linux/sys/sysmacros.h: Add missing