mseal() gets closer

Posted Feb 1, 2024 1:55 UTC (Thu) by kmeyer (subscriber, #50720)
Parent article: mseal() gets closer

> Röttger is working on adding support to the GNU C Library so that most programs would be able to run with a fair amount of sealing automatically applied.

Did you link to that somewhere or have more details? I'm curious what glibc would seal by default.

mseal() gets closer

Posted Feb 1, 2024 1:58 UTC (Thu) by kmeyer (subscriber, #50720) [Link]

Maybe https://patchwork.kernel.org/project/linux-mm/cover/20240... :

> The specific scenario currently in mind is
> glibc's use case of loading and sealing ELF executables. To this end,
> Stephen is working on a change to glibc to add sealing support to the
> dynamic linker, which will seal all non-writable segments at startup.

Ok, interesting.