cb1e3ca81e
- statically linked app can execute untrusted app Resolves: rhbz#2097077 - fapolicyd ineffective with systemd DynamicUser=yes Resolves: rhbz#2136802 - Starting manually fapolicyd while the service is already running breaks the system Resolves: rhbz#2160517 - Cannot execute /usr/libexec/grepconf.sh when falcon-sensor is enabled Resolves: rhbz#2160518 Signed-off-by: Radovan Sroka <rsroka@redhat.com>
23 lines
696 B
Diff
23 lines
696 B
Diff
From 67c116d07ed4e73127392a2100a042882488585a Mon Sep 17 00:00:00 2001
|
|
From: Steve Grubb <sgrubb@redhat.com>
|
|
Date: Tue, 27 Sep 2022 10:32:28 -0400
|
|
Subject: [PATCH] Detect trusted static apps running programs by ld.so
|
|
|
|
---
|
|
ChangeLog | 1 +
|
|
src/library/event.c | 1 -
|
|
2 files changed, 1 insertion(+), 1 deletion(-)
|
|
|
|
diff --git a/src/library/event.c b/src/library/event.c
|
|
index cbb4292..4d79eb9 100644
|
|
--- a/src/library/event.c
|
|
+++ b/src/library/event.c
|
|
@@ -149,7 +149,6 @@ int new_event(const struct fanotify_event_metadata *m, event_t *e)
|
|
skip_path = 1;
|
|
}
|
|
evict = 0;
|
|
- skip_path = 1;
|
|
subject_reset(s, EXE);
|
|
subject_reset(s, COMM);
|
|
subject_reset(s, EXE_TYPE);
|