diff options
| author | Mark Johnston <markj@FreeBSD.org> | 2026-06-02 20:29:00 +0000 |
|---|---|---|
| committer | Mark Johnston <markj@FreeBSD.org> | 2026-06-09 03:00:09 +0000 |
| commit | 796579bcfbc4451c618a973c52dada15b3f9928b (patch) | |
| tree | f23213ef6c832195679b0ea47decb6f8e8275fee /MdePkg/Library | |
| parent | 81435fc0882c8c336f00d346bae04fdd3d5f65b5 (diff) | |
imgact_elf: Clear no-ASLR and -WXORX flags earlier for setugid images
Otherwise an unprivileged user can disable randomization of the base
address for PIEs even if they are setugid.
Add a regression test.
Approved by: re (cperciva)
Approved by: so
Security: FreeBSD-SA-26:32.elf
Security: CVE-2026-49414
Reported by: David Berard
Reviewed by: kib
Sponsored by: The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D57397
Diffstat (limited to 'MdePkg/Library')
0 files changed, 0 insertions, 0 deletions