nix-ld icon indicating copy to clipboard operation
nix-ld copied to clipboard

Published 20 hours ago • verified publisher icon nix-community

Don't allow NIX_LD on setuid binaries

Open Mic92 opened this issue 2 years ago • 0 comments

In the unlikely event if someone has NIX_LD set and an setuid binary using /lib64/ld-linux-x86-64.so.2, an attacker might be able to diverge execution by pointing to a untrusted patched libc. This should never happen in normal usage of nixos.

Mic92 avatar Dec 31 '22 08:12 Mic92