Add system-wide tunables: Apply tunables part

Loads ld.so.cache, fetches the tunables extension, and applies those tunables to the current program, deferring security policy enforcement.

By DJ Delorie <[email protected]> February 21, 2024 Sentiment 5 / 10

This patch loads the ld.so.cache, retrieves the tunables extension, and applies the tunables to the current program. Security policies are not yet applied in this patch.

Technical Tradeoffs

Enables dynamic configuration but requires careful management of tunables.
Loading and applying tunables adds overhead to program startup.
Security policies are deferred to a later stage.

Filed Under: tunablesld.so.cachedynamic configurationperformance

View Original Thread →