3 ms·
Is this possible when trying to intercept and/or otherwise mess with system calls or stdlib function calls in a language that statically links all/most of its l
by zbentley 9y ago
Is this possible when trying to intercept and/or otherwise mess with system calls or stdlib function calls in a language that statically links all/most of its libraries? Are Go binaries affected? Statically-linked Rust binaries? If not, this is (depending on how you look at it) either a security point in favor of those languages or a hindrance to patching/debuggability.
- AnIdiotOnTheNet 9y agoIf your ELF is static, there is no ELF interpreter (ld.so), so LD_PRELOAD means nothing.
- jwilk 9y agoIf the program was linked statically to libfoo, you won't be able to preempt any libfoo symbols using LD_PRELOAD. There are other interception techniques that work against any binaries, even fully static ones: http://man7.org/linux/man-pages/man2/ptrace.2.html http://man7.org/linux/man-pages/man2/ptrace.2.html http://man7.org/linux/man-pages/man2/seccomp.2.html http://man7.org/linux/man-pages/man2/seccomp.2.html