On 08/25/2016 06:15 PM, James Bottomley wrote:
On Sun, 2016-08-21 at 21:01 -0700, Josh Max wrote:
This patch allows binfmt_misc to select the interpeter for arbitrary
binaries by comparing a specified registered keyword with the value
of a specified binary's extended attribute (user.binfmt.interp),
and then launching the program with the registered interpreter.
This is useful when wanting to launch a collection of binaries under
the same interpreter, even when they do not necessarily share a
common extension or magic bits, or when their magic conflics with the
operation of binfmt_elf. Some examples of its use would be to launch
some executables of various different architectures in a directory,
or for running some native binaries under a sandbox (like firejail)
automatically during their launch.
Could you expand on the use cases?
A non-security use case would be to run the binary (without
modification) with a different ELF interpreter (assuming this allows to
override binfmt_elf, but self-sandboxing would need that as well). This
would make it easier to use older or newer libcs for select binaries on
the system. Right now, one has to write wrappers for that, and the
explicit dynamic linker invocation is not completely transparent to the
application.
Florian
--
To unsubscribe from this list: send the line "unsubscribe linux-fsdevel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
