3 commits

Author	SHA1	Message	Date
Justine Tunney	6b3d257588	Use LD_PRELOAD to inject pledge() in glibc progs ... We're now able to drop both `exec` and `prot_exec` privileges automatically when launching glibc dynamic executables. We also have really outstanding standard error logging now, that explains which promises are needed, even in cases where `exec` is used.	2022-08-08 21:27:02 -07:00
Justine Tunney	0277d7d6e9	Rewrite Linux pledge() code so it can be a payload ... It's now possible to build our pledge() polyfill as a dynamic shared object that can be injected into a glibc executable using LD_PRELOAD	2022-08-08 11:41:08 -07:00
Justine Tunney	5546559034	Improve pledge() usability and consistency ... - We now kill the program on violations like OpenBSD - We now print a message explaining which promise is needed - This change also fixes a linkage bug with thread local storage - Your sigaction() handlers should now be more thread safe A new `__pledge_mode` global has been introduced to make pledge() more customizable on Linux. For example: __attribute__((__constructor__)) static void init(void) { __pledge_mode = SECCOMP_RET_ERRNO | EPERM; } Can be used to restore our old permissive pledge() behavior.	2022-08-07 16:18:33 -07:00