[PATCH v2 1/5] fs: Add support for an O_MAYEXEC flag on sys_open()
Florian Weimer
fweimer at redhat.com
Fri Sep 6 15:56:32 UTC 2019
Let's assume I want to add support for this to the glibc dynamic loader,
while still being able to run on older kernels.
Is it safe to try the open call first, with O_MAYEXEC, and if that fails
with EINVAL, try again without O_MAYEXEC?
Or do I risk disabling this security feature if I do that?
Do we need a different way for recognizing kernel support. (Note that
we cannot probe paths in /proc for various reasons.)
Thanks,
Florian
More information about the Linux-security-module-archive
mailing list