Changes between Version 1 and Version 2 of Ticket #13359, comment 1


Ignore:
Timestamp:
Oct 7, 2014, 7:20:03 PM (5 years ago)
Author:
gk
Comment:

Legend:

Unmodified
Added
Removed
Modified
  • Ticket #13359, comment 1

    v1 v2  
    22> Can we use -rpath at link time instead or will that cause other problems?
    33
    4 My first guess is that it will break one part of our hardening. We had the RPATH for a while available, see #9150. Then some jerk showed up on the forum and explained how this may easily be exploited: https://blog.torproject.org/blog/tor-browser-365-and-40-alpha-2-are-released#comment-74540. If your solutions leads to the same issue I'd rather avoid that.
     4My first guess is that it will break one part of our hardening. We had the RPATH for a while available, see #9150. Then some jerk showed up on the forum and explained how this may easily be exploited: https://blog.torproject.org/blog/tor-browser-365-and-40-alpha-2-are-released#comment-74540. If your solution leads to the same issue I'd rather avoid that.
    55
    66I wonder how tor is starting properly up at all after the update as it definitely needs the LD_LIBRARY_PATH. Or are we just lucky to have the libs on our system and thus, we don't see this problem during testing? Assuming the LD_LIBRARY_PATH is somehow working for tor but not Tor Browser, what is happening if you put the libstdc++ into the directory where all the libs are that tor needs and do the update then (assuming we put the library there and not into /Browser)? Could you test that scenario?