mirror of
				https://github.com/GrapheneOS/hardened_malloc.git
				synced 2025-11-04 09:46:32 +01:00 
			
		
		
		
	Merge 885a0490d0 into c894f3ec1d
				
					
				
			This commit is contained in:
		
						commit
						1560fe55b3
					
				
					 1 changed files with 5 additions and 2 deletions
				
			
		| 
						 | 
				
			
			@ -159,8 +159,11 @@ line to the `/etc/ld.so.preload` configuration file:
 | 
			
		|||
The format of this configuration file is a whitespace-separated list, so it's
 | 
			
		||||
good practice to put each library on a separate line.
 | 
			
		||||
 | 
			
		||||
On Debian systems `libhardened_malloc.so` should be installed into `/usr/lib/`
 | 
			
		||||
to avoid preload failures caused by AppArmor profile restrictions.
 | 
			
		||||
For maximum compatibility `libhardened_malloc.so` can be installed into
 | 
			
		||||
`/usr/lib/` to avoid preload failures caused by AppArmor profile or systemd
 | 
			
		||||
ExecPaths= restrictions. Check for logs of the following format:
 | 
			
		||||
 | 
			
		||||
    ERROR: ld.so: object '/usr/local/lib/libhardened_malloc.so' from /etc/ld.so.preload cannot be preloaded (failed to map segment from shared object): ignored.
 | 
			
		||||
 | 
			
		||||
Using the `LD_PRELOAD` environment variable to load it on a case-by-case basis
 | 
			
		||||
will not work when `AT_SECURE` is set such as with setuid binaries. It's also
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
		Loading…
	
	Add table
		
		Reference in a new issue