diff options
author | Ralf Donau <ruelle@volleyballschlaeger.de> | 2021-09-08 19:40:07 +0200 |
---|---|---|
committer | Andreas Kling <kling@serenityos.org> | 2021-09-09 11:32:16 +0200 |
commit | ec03f29fd14c912ab384ff10ace87862787feb58 (patch) | |
tree | 23974d23b2389a745e9985e22b6ceab07692c0ca /Kernel | |
parent | 3bf204fd0302e37481046f957c069fb2c4d40692 (diff) | |
download | serenity-ec03f29fd14c912ab384ff10ace87862787feb58.zip |
Kernel/VFS: Restrict special unveil rule for Loader.so
Diffstat (limited to 'Kernel')
-rw-r--r-- | Kernel/FileSystem/VirtualFileSystem.cpp | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/Kernel/FileSystem/VirtualFileSystem.cpp b/Kernel/FileSystem/VirtualFileSystem.cpp index 41a3c5050a..5378a58a2d 100644 --- a/Kernel/FileSystem/VirtualFileSystem.cpp +++ b/Kernel/FileSystem/VirtualFileSystem.cpp @@ -764,7 +764,7 @@ KResult VirtualFileSystem::validate_path_against_process_veil(StringView path, i { if (Process::current().veil_state() == VeilState::None) return KSuccess; - if (path == "/usr/lib/Loader.so") + if (options == O_EXEC && path == "/usr/lib/Loader.so") return KSuccess; VERIFY(path.starts_with('/')); |