aufover / rpm-symbiotic

RPM packaging of staticafi/symbiotic
MIT License
0 stars 3 forks source link

csexec-symbiotic: start symbiotic in sane environment #4

Closed kdudka closed 2 years ago

kdudka commented 2 years ago

csexec-symbiotic is transparently invoked from test programs that often run in specially crafted environment to exercise the tested binaries. For example, GNU coreutils sets $PATH such that the just built binaries are preferred over system-provided binaries with the same name. This causes havoc in case symbiotic wants to use system-provided binaries without specifying them with absolute path. Especially, when symbiotic by mistake invokes binaries that use csexec-loader as ELF interpreter, this recursively invokes csexec-symbiotic and symbiotic in a loop and attacks the machine with a fork bomb.