4 ms·
This is not an attack vector and not something programs should try to protect against. If attackers have control to the point that they can run a program with L
by josephcsible 3y ago
This is not an attack vector and not something programs should try to protect against. If attackers have control to the point that they can run a program with LD_PRELOAD, they've already won.
- ghotli 3y agoWon on that node, agreed. I suppose I meant the 'investigate programs' part of the title and if that aids in garnering info for attacking something it interacts with. But of course it's all splitting hairs. A sufficiently dedicated / motivated / funded person can investigate even the most hardened static position independent binary. Dynamic linking with LD_PRELOAD is like propping the front door open in comparison.
- yonatan8070 3y agoThere are cases where developers need to protect software from a local user with root access, like DRM related software, games that want to defend against pirates, etc.
- ronsor 3y agoThat's more of a want than a need.
- josephcsible 3y agoThose use cases are inherently evil, and the rest of us should go out of our way to make them impossible, or at least as difficult as possible. A local user with root access should always have full control over everything, regardless of the wishes of any hardware manufacturers or software developers.
- saagarjha 3y agoThis would not help with that goal.