RGBCube/serenity
1
Fork 0
mirror of https://github.com/RGBCube/serenity synced 2025-10-31 07:52:45 +00:00
Code Issues Activity Actions

Kernel/FileSystem: Remove hardcoded unveil path of /usr/lib/Loader.so

Browse source 
If a program needs to execute a dynamic executable program, then it
should unveil /usr/lib/Loader.so by itself and not rely on the Kernel to
allow using this binary without any sense of respect to unveil promises
being made by the running parent program.
This commit is contained in:
Liav A 2022-10-24 18:09:03 +03:00 • committed by Andrew Kaster
parent d102ea5f81
commit 03ae9f94cf
1 changed files with 0 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

2
Kernel/FileSystem/VirtualFileSystem.cpp
View file

@ -886,8 +886,6 @@ ErrorOr<void> VirtualFileSystem::validate_path_against_process_veil(StringView p
{
if (Process::current().veil_state() == VeilState::None)
return {};
if (options == O_EXEC && path == "/usr/lib/Loader.so")
return {};
VERIFY(path.starts_with('/'));
VERIFY(!path.contains("/../"sv) && !path.ends_with("/.."sv));