mirror of
https://github.com/LadybirdBrowser/ladybird
synced 2026-05-01 12:07:14 +02:00
Kernel/VFS: Restrict special unveil rule for Loader.so
This commit is contained in:
committed by
Andreas Kling
parent
3bf204fd03
commit
ec03f29fd1
Notes:
sideshowbarker
2024-07-18 04:23:17 +09:00
Author: https://github.com/doctor-rd Commit: https://github.com/SerenityOS/serenity/commit/ec03f29fd14 Pull-request: https://github.com/SerenityOS/serenity/pull/9894 Reviewed-by: https://github.com/itamar8910 ✅
@@ -764,7 +764,7 @@ KResult VirtualFileSystem::validate_path_against_process_veil(StringView path, i
|
||||
{
|
||||
if (Process::current().veil_state() == VeilState::None)
|
||||
return KSuccess;
|
||||
if (path == "/usr/lib/Loader.so")
|
||||
if (options == O_EXEC && path == "/usr/lib/Loader.so")
|
||||
return KSuccess;
|
||||
|
||||
VERIFY(path.starts_with('/'));
|
||||
|
||||
Reference in New Issue
Block a user