Re: BTI interaction between seccomp filters in systemd and glibc mprotect calls, causing service failures
From: Mark Brown <broonie@kernel.org>
Date: 2020-10-26 16:52:24
Also in:
linux-hardening, lkml
On Mon, Oct 26, 2020 at 03:56:35PM +0000, Dave Martin wrote:
On Mon, Oct 26, 2020 at 02:52:46PM +0000, Catalin Marinas via Libc-alpha wrote:
quoted
Now, if the dynamic loader silently ignores the mprotect() failure on the main executable, is there much value in exposing a flag in the aux vectors? It saves a few (one?) mprotect() calls but I don't think it matters much. Anyway, I don't mind the flag.
I don't see a problem with the aforementioned patch [2] to pre-set BTI on the pages of the main binary.
Me either FWIW.