[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: /usr/bin/ld.so as a symbolic link for the dynamic loader



On Fri, Dec 03, 2021 at 04:16:04PM +0200, Timo Lindfors wrote:
> Just a random thought: If you have configured a restricted shell (e.g.
> rbash) that only lets you execute commands in PATH, will this make it
> possible to bypass the restriction with "ld.so /tmp/some-random-binary"?
> This is not necessary an argument to not do this, I'm just wondering what
> the implications could be.

The same as /bin/bash -c, /usr/bin/python3 -c.  ld.so is an interpreter
in the same way.

Bastian

-- 
Spock: The odds of surviving another attack are 13562190123 to 1, Captain.


Reply to: