opentelemetry-collector-releases icon indicating copy to clipboard operation
opentelemetry-collector-releases copied to clipboard

Prevent DYLB from being loaded in darwin binaries

Open mx-psi opened this issue 1 month ago • 0 comments

macOS has a similar mechanism to LD_PRELOAD in Linux called DYLD_INSERT_LIBRARIES. Our current macOS binaries honor this environment variable, while the Linux ones do not. It is a good security practice to prevent usage of said environment variable to avoid preloading of arbitrary dynamic libraries.

To harden our binaries we can follow this StackOverflow answer advice.

Reported as part of the recent security audit.

mx-psi avatar Jun 26 '24 17:06 mx-psi