| Message ID | 20240229214654.2306477-1-josimmon@redhat.com |
|---|---|
| State | New |
| Headers | show |
| Series | NEWS: Move enable_secure_tunable from 2.39 to 2.40. | expand |
On 2024-02-29 16:46, Joe Simmons-Talbott wrote: > From: Joe Talbott <joetalbott@gmail.com> > > --- This is a trivial fix, please push. Thanks, Sid > NEWS | 10 +++++----- > 1 file changed, 5 insertions(+), 5 deletions(-) > > diff --git a/NEWS b/NEWS > index 19f4e93ea3..da4b2223e9 100644 > --- a/NEWS > +++ b/NEWS > @@ -21,6 +21,11 @@ Major new features: > by _GNU_SOURCE, or by compiling with the GCC options -std=c23, > -std=gnu23, -std=c2x or -std=gnu2x. > > +* A new tunable, glibc.rtld.enable_secure, used to run a program > + as if it were a setuid process. This is currently a testing tool to allow > + more extensive verification tests for AT_SECURE programs and not meant to > + be a security feature. > + > Deprecated and removed features, and other changes affecting compatibility: > > [Add deprecations, removals and changes affecting compatibility here] > @@ -103,11 +108,6 @@ Major new features: > exp, expf, exp10, exp10f, exp2, exp2f, expm1, expm1f, log, logf, > log10, log10f, log1p, log1pf, log2, log2f, sin, sinf, tan, tanf. > > -* A new tunable, glibc.rtld.enable_secure, used to run a program > - as if it were a setuid process. This is currently a testing tool to allow > - more extensive verification tests for AT_SECURE programs and not meant to > - be a security feature. > - > Deprecated and removed features, and other changes affecting compatibility: > > * The ldconfig program now skips file names containing ';' or ending in
On Fri, Mar 1, 2024 at 10:18 AM Siddhesh Poyarekar <siddhesh@gotplt.org> wrote: > > On 2024-02-29 16:46, Joe Simmons-Talbott wrote: > > From: Joe Talbott <joetalbott@gmail.com> > > > > --- > > This is a trivial fix, please push. Ack. Pushed. Thanks, Joe > > Thanks, > Sid > > > > NEWS | 10 +++++----- > > 1 file changed, 5 insertions(+), 5 deletions(-) > > > > diff --git a/NEWS b/NEWS > > index 19f4e93ea3..da4b2223e9 100644 > > --- a/NEWS > > +++ b/NEWS > > @@ -21,6 +21,11 @@ Major new features: > > by _GNU_SOURCE, or by compiling with the GCC options -std=c23, > > -std=gnu23, -std=c2x or -std=gnu2x. > > > > +* A new tunable, glibc.rtld.enable_secure, used to run a program > > + as if it were a setuid process. This is currently a testing tool to allow > > + more extensive verification tests for AT_SECURE programs and not meant to > > + be a security feature. > > + > > Deprecated and removed features, and other changes affecting compatibility: > > > > [Add deprecations, removals and changes affecting compatibility here] > > @@ -103,11 +108,6 @@ Major new features: > > exp, expf, exp10, exp10f, exp2, exp2f, expm1, expm1f, log, logf, > > log10, log10f, log1p, log1pf, log2, log2f, sin, sinf, tan, tanf. > > > > -* A new tunable, glibc.rtld.enable_secure, used to run a program > > - as if it were a setuid process. This is currently a testing tool to allow > > - more extensive verification tests for AT_SECURE programs and not meant to > > - be a security feature. > > - > > Deprecated and removed features, and other changes affecting compatibility: > > > > * The ldconfig program now skips file names containing ';' or ending in >
diff --git a/NEWS b/NEWS index 19f4e93ea3..da4b2223e9 100644 --- a/NEWS +++ b/NEWS @@ -21,6 +21,11 @@ Major new features: by _GNU_SOURCE, or by compiling with the GCC options -std=c23, -std=gnu23, -std=c2x or -std=gnu2x. +* A new tunable, glibc.rtld.enable_secure, used to run a program + as if it were a setuid process. This is currently a testing tool to allow + more extensive verification tests for AT_SECURE programs and not meant to + be a security feature. + Deprecated and removed features, and other changes affecting compatibility: [Add deprecations, removals and changes affecting compatibility here] @@ -103,11 +108,6 @@ Major new features: exp, expf, exp10, exp10f, exp2, exp2f, expm1, expm1f, log, logf, log10, log10f, log1p, log1pf, log2, log2f, sin, sinf, tan, tanf. -* A new tunable, glibc.rtld.enable_secure, used to run a program - as if it were a setuid process. This is currently a testing tool to allow - more extensive verification tests for AT_SECURE programs and not meant to - be a security feature. - Deprecated and removed features, and other changes affecting compatibility: * The ldconfig program now skips file names containing ';' or ending in
From: Joe Talbott <joetalbott@gmail.com> --- NEWS | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-)