#include &lt;/etc/shadow&gt;

Re:#include </etc/shadow> by ajor on Tuesday December 17, 2019 @09:03AM (#21813482)

Still some workarounds to the slash-stripping:

  #include "\
  /etc/passwd"

  program221/code.cpp:1:11: warning: backslash-newline at end of file
      1 | #include "\
        |            
  In file included from program221/code.cpp:2:
  /etc/passwd:1:5: error: found ':' in nested-name-specifier, expected '::'
      1 | root:x:0:0:root:/root:/bin/bash
        |     ^
        |     ::
  /etc/passwd:1:1: error: 'root' does not name a type
      1 | root:x:0:0:root:/root:/bin/bash
        | ^~~~

Is it possible to restrict the compiler's access to only files in "/usr/include" instead? Seems like it'd be hard to cover every case with just pattern matching.

[ Parent | on HN ]

Re:#include </etc/shadow> by fwsgonzo on Tuesday December 17, 2019 @09:10AM (#21813549)

It would be awesome if you could place restrictions on the compiler, but I don't know of any such features atm. Still, the compilation happens in the container (which is just a default Ubuntu image with a cross compiler in it). I don't know how much information there is to disclose. Not taking it lightly though, I guess I will have to find a way to really handle the preprocessor stuff, but I still want people to be able to include system headers.

[ Parent | on HN ]

Re:#include </etc/shadow> by blattimwind on Tuesday December 17, 2019 @09:11AM (#21813560)

> Is it possible to restrict the compiler's access to only files in "/usr/include" instead? Seems like it'd be hard to cover every case with just pattern matching.

chroot into a build environment

[ Parent | on HN ]

Re:#include </etc/shadow> by sherincall on Tuesday December 17, 2019 @10:04AM (#21814080)

You can LD_PRELOAD an .so that overrides `open` and family of functions, and drop opens based on a whitelist/blacklist.

[ Parent | on HN ]