summaryrefslogtreecommitdiff
path: root/Kernel
diff options
context:
space:
mode:
authorRalf Donau <ruelle@volleyballschlaeger.de>2021-09-08 19:40:07 +0200
committerAndreas Kling <kling@serenityos.org>2021-09-09 11:32:16 +0200
commitec03f29fd14c912ab384ff10ace87862787feb58 (patch)
tree23974d23b2389a745e9985e22b6ceab07692c0ca /Kernel
parent3bf204fd0302e37481046f957c069fb2c4d40692 (diff)
downloadserenity-ec03f29fd14c912ab384ff10ace87862787feb58.zip
Kernel/VFS: Restrict special unveil rule for Loader.so
Diffstat (limited to 'Kernel')
-rw-r--r--Kernel/FileSystem/VirtualFileSystem.cpp2
1 files changed, 1 insertions, 1 deletions
diff --git a/Kernel/FileSystem/VirtualFileSystem.cpp b/Kernel/FileSystem/VirtualFileSystem.cpp
index 41a3c5050a..5378a58a2d 100644
--- a/Kernel/FileSystem/VirtualFileSystem.cpp
+++ b/Kernel/FileSystem/VirtualFileSystem.cpp
@@ -764,7 +764,7 @@ KResult VirtualFileSystem::validate_path_against_process_veil(StringView path, i
{
if (Process::current().veil_state() == VeilState::None)
return KSuccess;
- if (path == "/usr/lib/Loader.so")
+ if (options == O_EXEC && path == "/usr/lib/Loader.so")
return KSuccess;
VERIFY(path.starts_with('/'));