New AT_EXECVE_CHECK for code integrity for interpreters
New AT_EXECVE_CHECK for code integrity for interpreters
Posted Jan 23, 2025 16:47 UTC (Thu) by acarno (subscriber, #123476)In reply to: New AT_EXECVE_CHECK for code integrity for interpreters by bluca
Parent article: The first part of the 6.14 merge window
I feel like I remember reading more about this flag, but I can't find an LWN article. If I'm reading the man page for execveat(2) correctly, this takes in a directory file descriptor and a pathname. Can this lead to TOCTOU bugs if the underlying file is modified between the AT_EXECVE_CHECK call and the actual script execution? I'd imagine it would be safer to do this via a file descriptor, no?
The LWN site is currently under high scraper load, so comment display has been suppressed for anonymous users. If you are a human, you may read the comments by clicking the button below:
Note: you can avoid this step in the future by logging into your LWN account.