On Fri, Dec 03, 2021 at 04:16:04PM +0200, Timo Lindfors wrote: > Just a random thought: If you have configured a restricted shell (e.g. > rbash) that only lets you execute commands in PATH, will this make it > possible to bypass the restriction with "ld.so /tmp/some-random-binary"? > This is not necessary an argument to not do this, I'm just wondering what > the implications could be.
The same as /bin/bash -c, /usr/bin/python3 -c. ld.so is an interpreter in the same way. Bastian -- Spock: The odds of surviving another attack are 13562190123 to 1, Captain.