RGBCube/serenity
1
Fork 0
mirror of https://github.com/RGBCube/serenity synced 2025-05-31 11:38:11 +00:00
Code Issues Activity Actions

Kernel/VFS: Restrict special unveil rule for Loader.so

Browse source
This commit is contained in:
Ralf Donau 2021-09-08 19:40:07 +02:00 • committed by Andreas Kling
parent 3bf204fd03
commit ec03f29fd1
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
Kernel/FileSystem/VirtualFileSystem.cpp
View file

@ -764,7 +764,7 @@ KResult VirtualFileSystem::validate_path_against_process_veil(StringView path, i
{ {
if (Process::current().veil_state() == VeilState::None) if (Process::current().veil_state() == VeilState::None)
return KSuccess; return KSuccess;
if (path == "/usr/lib/Loader.so") if (options == O_EXEC && path == "/usr/lib/Loader.so")
return KSuccess; return KSuccess;
VERIFY(path.starts_with('/')); VERIFY(path.starts_with('/'));