-
Notifications
You must be signed in to change notification settings - Fork 12
allow users to opt-out of fallbacks #19
Copy link
Copy link
Open
Labels
api/cffiRelated to the C-FFI API.Related to the C-FFI API.api/rustRelated to the Rust API.Related to the Rust API.impact/featureAn issue or PR that adds new distinct functionality.An issue or PR that adds new distinct functionality.securityA security issue or hardening problem.A security issue or hardening problem.
Milestone
Metadata
Metadata
Assignees
Labels
api/cffiRelated to the C-FFI API.Related to the C-FFI API.api/rustRelated to the Rust API.Related to the Rust API.impact/featureAn issue or PR that adds new distinct functionality.An issue or PR that adds new distinct functionality.securityA security issue or hardening problem.A security issue or hardening problem.
One of the problems exposed by research into #7 is that there are a lot of issues with safe
/procusage on older kernels (and many more kernel features are still required). We cannot error out by default if these features are not available (nobody will uselibpathrsbecause it won't work on most systems). So we have to make it an opt-in for very security-conscious programs (or to allow a program to print a warning if the system is insecure, and then enable the less-secure lookups).