Smack: add acess label to ldconfig to prevent privilege escalation
authorDongkyun Son <dongkyun.s@samsung.com>
Wed, 10 Apr 2019 08:28:48 +0000 (17:28 +0900)
committerMikhail Kashkarov <m.kashkarov@partner.samsung.com>
Thu, 28 Nov 2019 15:37:59 +0000 (18:37 +0300)
Change-Id: I5df0c2fa2c868dee6d3ee38ce8a4d53ce038efe8
Signed-off-by: Dongkyun Son <dongkyun.s@samsung.com>
packaging/glibc.manifest

index 14b2780..a20dbcb 100644 (file)
@@ -3,6 +3,6 @@
     <domain name="_"/>
  </request>
  <assign>
-    <filesystem path="/sbin/ldconfig" exec_label="_" />
+    <filesystem path="/sbin/ldconfig" label="System" exec_label="_" />
  </assign>
 </manifest>