Changeset 66554 in vbox for trunk/src

Timestamp:

Apr 13, 2017 11:56:01 AM (8 years ago)

Author:

vboxsync

Message:

HostDrivers/Support: Relax the verification for /usr/lib/iconv on Solaris where bin also has write access

File:

• trunk/src/VBox/HostDrivers/Support/SUPR3HardenedVerify.cpp (modified) (1 diff)

trunk/src/VBox/HostDrivers/Support/SUPR3HardenedVerify.cpp

@@ -1475 +1475 @@
         bool fBad = !fRelaxed || pFsObjState->Stat.st_gid != 5 /*operator*/ || suplibHardenedStrCmp(pszPath, "/usr/pbi");
         NOREF(fRelaxed);
+#elif defined(RT_OS_SOLARIS)
+        /* HACK ALERT: Solaris has group-writable /usr/lib/iconv directory from
+           which the appropriate module is loaded.
+           By default only root and daemon are part of that group.
+           . */
+        /** @todo dynamically resolve the bin group? */
+        bool fBad = !fRelaxed || pFsObjState->Stat.st_gid != 2 /*bin*/ || suplibHardenedStrCmp(pszPath, "/usr/lib/iconv");
 #else
         NOREF(fRelaxed);