Date: Sat, 15 Oct 2022 16:09:12 GMT From: "Simon J. Gerraty" <sjg@FreeBSD.org> To: src-committers@FreeBSD.org, dev-commits-src-all@FreeBSD.org, dev-commits-src-branches@FreeBSD.org Subject: git: 1682f901ece7 - stable/13 - ldd: ignore unverified files Message-ID: <202210151609.29FG9Cej042406@gitrepo.freebsd.org>
next in thread | raw e-mail | index | archive | help
The branch stable/13 has been updated by sjg: URL: https://cgit.FreeBSD.org/src/commit/?id=1682f901ece7a13dd2256c9197b37d9fa564c86c commit 1682f901ece7a13dd2256c9197b37d9fa564c86c Author: Simon J. Gerraty <sjg@FreeBSD.org> AuthorDate: 2022-10-07 00:51:28 +0000 Commit: Simon J. Gerraty <sjg@FreeBSD.org> CommitDate: 2022-10-15 16:08:44 +0000 ldd: ignore unverified files When mac_veriexec is enforcing, we won't run unverified binaries, don't let ldd examine them either. Reviewed by: stevek emaste MFC after: 1 week Sponsored by: Juniper Networks, Inc. Differential Revision: https://reviews.freebsd.org/D36897 (cherry picked from commit f48114b653a2a3d8f817ad68186235595ce304ed) --- usr.bin/ldd/ldd.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/usr.bin/ldd/ldd.c b/usr.bin/ldd/ldd.c index 8897c8cbfbc2..2cd2a4c72324 100644 --- a/usr.bin/ldd/ldd.c +++ b/usr.bin/ldd/ldd.c @@ -169,7 +169,7 @@ main(int argc, char *argv[]) rval = 0; for (; argc > 0; argc--, argv++) { - if ((fd = open(*argv, O_RDONLY, 0)) < 0) { + if ((fd = open(*argv, O_RDONLY | O_VERIFY, 0)) < 0) { warn("%s", *argv); rval |= 1; continue;
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?202210151609.29FG9Cej042406>