From 885a0490d0861a19f9c12b1ef7e407ef73c50391 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Christian=20G=C3=B6ttsche?= Date: Mon, 21 Oct 2024 18:33:56 +0200 Subject: [PATCH] ReadMe: adjust section about library location --- README.md | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index b83595e..53b7a1a 100644 --- a/README.md +++ b/README.md @@ -159,8 +159,11 @@ line to the `/etc/ld.so.preload` configuration file: The format of this configuration file is a whitespace-separated list, so it's good practice to put each library on a separate line. -On Debian systems `libhardened_malloc.so` should be installed into `/usr/lib/` -to avoid preload failures caused by AppArmor profile restrictions. +For maximum compatibility `libhardened_malloc.so` can be installed into +`/usr/lib/` to avoid preload failures caused by AppArmor profile or systemd +ExecPaths= restrictions. Check for logs of the following format: + + ERROR: ld.so: object '/usr/local/lib/libhardened_malloc.so' from /etc/ld.so.preload cannot be preloaded (failed to map segment from shared object): ignored. Using the `LD_PRELOAD` environment variable to load it on a case-by-case basis will not work when `AT_SECURE` is set such as with setuid binaries. It's also