From 7093fdc4822aec123c51f663811ffe5e96b65213 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Christian=20G=C3=B6ttsche?= Date: Thu, 14 Dec 2023 10:36:59 +0100 Subject: [PATCH] README: add note about AppArmor constraint on Debian --- README.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/README.md b/README.md index 8962037..9029924 100644 --- a/README.md +++ b/README.md @@ -159,6 +159,9 @@ line to the `/etc/ld.so.preload` configuration file: The format of this configuration file is a whitespace-separated list, so it's good practice to put each library on a separate line. +On Debian systems `libhardened_malloc.so` should be installed into `/usr/lib/` +to avoid preload failures caused by AppArmor profile restrictions. + Using the `LD_PRELOAD` environment variable to load it on a case-by-case basis will not work when `AT_SECURE` is set such as with setuid binaries. It's also generally not a recommended approach for production usage. The recommendation