News for hackers. Stuff that matters.

A comment on Never run ldd on unknown executables. Parent comment

Re:Never run ldd on unknown executables by IshKebab on Monday July 24, 2023 @12:27PM (#36850522)
That's the wrong way to solve this. You have to assume people don't read the manual, especially for security issues.

The correct solution is that `ldd` should be safe by default, and require a `--allow-unsafe-execution` flag if it needs to actually execute code.

I think this is pretty well known these days but probably not well known enough!

[ Parent | on HN ]
Re:Never run ldd on unknown executables by gpvos on Tuesday July 25, 2023 @07:04AM (#36860561)
Too backwards incompatible maybe, although you could add a check on whether the output is a tty, like ls does; I don't know how often ldd is used in scripts.
[ Parent | on HN ]