You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
208 lines
11 KiB
HTML
208 lines
11 KiB
HTML
4 years ago
|
<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
|
||
|
|
<html>
|
||
|
|
<!-- Copyright (C) 1988-2019 Free Software Foundation, Inc.
|
||
|
|
|
||
|
|
Permission is granted to copy, distribute and/or modify this document
|
||
|
|
under the terms of the GNU Free Documentation License, Version 1.3 or
|
||
|
|
any later version published by the Free Software Foundation; with the
|
||
|
|
Invariant Sections being "Free Software" and "Free Software Needs
|
||
|
|
Free Documentation", with the Front-Cover Texts being "A GNU Manual,"
|
||
|
|
and with the Back-Cover Texts as in (a) below.
|
||
|
|
|
||
|
|
(a) The FSF's Back-Cover Text is: "You are free to copy and modify
|
||
|
|
this GNU Manual. Buying copies from GNU Press supports the FSF in
|
||
|
|
developing GNU and promoting software freedom." -->
|
||
|
|
<!-- Created by GNU Texinfo 6.4, http://www.gnu.org/software/texinfo/ -->
|
||
|
|
<head>
|
||
|
|
<title>Auto-loading safe path (Debugging with GDB)</title>
|
||
|
|
|
||
|
|
<meta name="description" content="Auto-loading safe path (Debugging with GDB)">
|
||
|
|
<meta name="keywords" content="Auto-loading safe path (Debugging with GDB)">
|
||
|
|
<meta name="resource-type" content="document">
|
||
|
|
<meta name="distribution" content="global">
|
||
|
|
<meta name="Generator" content="makeinfo">
|
||
|
|
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
|
||
|
|
<link href="index.html#Top" rel="start" title="Top">
|
||
|
|
<link href="Concept-Index.html#Concept-Index" rel="index" title="Concept Index">
|
||
|
|
<link href="index.html#SEC_Contents" rel="contents" title="Table of Contents">
|
||
|
|
<link href="Auto_002dloading.html#Auto_002dloading" rel="up" title="Auto-loading">
|
||
|
|
<link href="Auto_002dloading-verbose-mode.html#Auto_002dloading-verbose-mode" rel="next" title="Auto-loading verbose mode">
|
||
|
|
<link href="libthread_005fdb_002eso_002e1-file.html#libthread_005fdb_002eso_002e1-file" rel="prev" title="libthread_db.so.1 file">
|
||
|
|
<style type="text/css">
|
||
|
|
<!--
|
||
|
|
a.summary-letter {text-decoration: none}
|
||
|
|
blockquote.indentedblock {margin-right: 0em}
|
||
|
|
blockquote.smallindentedblock {margin-right: 0em; font-size: smaller}
|
||
|
|
blockquote.smallquotation {font-size: smaller}
|
||
|
|
div.display {margin-left: 3.2em}
|
||
|
|
div.example {margin-left: 3.2em}
|
||
|
|
div.lisp {margin-left: 3.2em}
|
||
|
|
div.smalldisplay {margin-left: 3.2em}
|
||
|
|
div.smallexample {margin-left: 3.2em}
|
||
|
|
div.smalllisp {margin-left: 3.2em}
|
||
|
|
kbd {font-style: oblique}
|
||
|
|
pre.display {font-family: inherit}
|
||
|
|
pre.format {font-family: inherit}
|
||
|
|
pre.menu-comment {font-family: serif}
|
||
|
|
pre.menu-preformatted {font-family: serif}
|
||
|
|
pre.smalldisplay {font-family: inherit; font-size: smaller}
|
||
|
|
pre.smallexample {font-size: smaller}
|
||
|
|
pre.smallformat {font-family: inherit; font-size: smaller}
|
||
|
|
pre.smalllisp {font-size: smaller}
|
||
|
|
span.nolinebreak {white-space: nowrap}
|
||
|
|
span.roman {font-family: initial; font-weight: normal}
|
||
|
|
span.sansserif {font-family: sans-serif; font-weight: normal}
|
||
|
|
ul.no-bullet {list-style: none}
|
||
|
|
-->
|
||
|
|
</style>
|
||
|
|
|
||
|
|
|
||
|
|
</head>
|
||
|
|
|
||
|
|
<body lang="en">
|
||
|
|
<a name="Auto_002dloading-safe-path"></a>
|
||
|
|
<div class="header">
|
||
|
|
<p>
|
||
|
|
Next: <a href="Auto_002dloading-verbose-mode.html#Auto_002dloading-verbose-mode" accesskey="n" rel="next">Auto-loading verbose mode</a>, Previous: <a href="libthread_005fdb_002eso_002e1-file.html#libthread_005fdb_002eso_002e1-file" accesskey="p" rel="prev">libthread_db.so.1 file</a>, Up: <a href="Auto_002dloading.html#Auto_002dloading" accesskey="u" rel="up">Auto-loading</a> [<a href="index.html#SEC_Contents" title="Table of contents" rel="contents">Contents</a>][<a href="Concept-Index.html#Concept-Index" title="Index" rel="index">Index</a>]</p>
|
||
|
|
</div>
|
||
|
|
<hr>
|
||
|
|
<a name="Security-restriction-for-auto_002dloading"></a>
|
||
|
|
<h4 class="subsection">22.8.3 Security restriction for auto-loading</h4>
|
||
|
|
<a name="index-auto_002dloading-safe_002dpath"></a>
|
||
|
|
|
||
|
|
<p>As the files of inferior can come from untrusted source (such as submitted by
|
||
|
|
an application user) <small>GDB</small> does not always load any files automatically.
|
||
|
|
<small>GDB</small> provides the ‘<samp>set auto-load safe-path</samp>’ setting to list
|
||
|
|
directories trusted for loading files not explicitly requested by user.
|
||
|
|
Each directory can also be a shell wildcard pattern.
|
||
|
|
</p>
|
||
|
|
<p>If the path is not set properly you will see a warning and the file will not
|
||
|
|
get loaded:
|
||
|
|
</p>
|
||
|
|
<div class="smallexample">
|
||
|
|
<pre class="smallexample">$ ./gdb -q ./gdb
|
||
|
|
Reading symbols from /home/user/gdb/gdb...done.
|
||
|
|
warning: File "/home/user/gdb/gdb-gdb.gdb" auto-loading has been
|
||
|
|
declined by your `auto-load safe-path' set
|
||
|
|
to "$debugdir:$datadir/auto-load".
|
||
|
|
warning: File "/home/user/gdb/gdb-gdb.py" auto-loading has been
|
||
|
|
declined by your `auto-load safe-path' set
|
||
|
|
to "$debugdir:$datadir/auto-load".
|
||
|
|
</pre></div>
|
||
|
|
|
||
|
|
<p>To instruct <small>GDB</small> to go ahead and use the init files anyway,
|
||
|
|
invoke <small>GDB</small> like this:
|
||
|
|
</p>
|
||
|
|
<div class="smallexample">
|
||
|
|
<pre class="smallexample">$ gdb -q -iex "set auto-load safe-path /home/user/gdb" ./gdb
|
||
|
|
</pre></div>
|
||
|
|
|
||
|
|
<p>The list of trusted directories is controlled by the following commands:
|
||
|
|
</p>
|
||
|
|
<dl compact="compact">
|
||
|
|
<dd><a name="set-auto_002dload-safe_002dpath"></a><a name="index-set-auto_002dload-safe_002dpath"></a>
|
||
|
|
</dd>
|
||
|
|
<dt><code>set auto-load safe-path <span class="roman">[</span><var>directories</var><span class="roman">]</span></code></dt>
|
||
|
|
<dd><p>Set the list of directories (and their subdirectories) trusted for automatic
|
||
|
|
loading and execution of scripts. You can also enter a specific trusted file.
|
||
|
|
Each directory can also be a shell wildcard pattern; wildcards do not match
|
||
|
|
directory separator - see <code>FNM_PATHNAME</code> for system function <code>fnmatch</code>
|
||
|
|
(see <a href="http://www.gnu.org/software/libc/manual/html_node/Wildcard-Matching.html#Wildcard-Matching">fnmatch</a> in <cite>GNU C Library Reference Manual</cite>).
|
||
|
|
If you omit <var>directories</var>, ‘<samp>auto-load safe-path</samp>’ will be reset to
|
||
|
|
its default value as specified during <small>GDB</small> compilation.
|
||
|
|
</p>
|
||
|
|
<p>The list of directories uses path separator (‘<samp>:</samp>’ on GNU and Unix
|
||
|
|
systems, ‘<samp>;</samp>’ on MS-Windows and MS-DOS) to separate directories, similarly
|
||
|
|
to the <code>PATH</code> environment variable.
|
||
|
|
</p>
|
||
|
|
<a name="show-auto_002dload-safe_002dpath"></a><a name="index-show-auto_002dload-safe_002dpath"></a>
|
||
|
|
</dd>
|
||
|
|
<dt><code>show auto-load safe-path</code></dt>
|
||
|
|
<dd><p>Show the list of directories trusted for automatic loading and execution of
|
||
|
|
scripts.
|
||
|
|
</p>
|
||
|
|
<a name="add_002dauto_002dload_002dsafe_002dpath"></a><a name="index-add_002dauto_002dload_002dsafe_002dpath"></a>
|
||
|
|
</dd>
|
||
|
|
<dt><code>add-auto-load-safe-path</code></dt>
|
||
|
|
<dd><p>Add an entry (or list of entries) to the list of directories trusted for
|
||
|
|
automatic loading and execution of scripts. Multiple entries may be delimited
|
||
|
|
by the host platform path separator in use.
|
||
|
|
</p></dd>
|
||
|
|
</dl>
|
||
|
|
|
||
|
|
<p>This variable defaults to what <code>--with-auto-load-dir</code> has been configured
|
||
|
|
to (see <a href="objfile_002dgdbdotext-file.html#with_002dauto_002dload_002ddir">with-auto-load-dir</a>). <samp>$debugdir</samp> and <samp>$datadir</samp>
|
||
|
|
substitution applies the same as for <a href="objfile_002dgdbdotext-file.html#set-auto_002dload-scripts_002ddirectory">set auto-load scripts-directory</a>.
|
||
|
|
The default <code>set auto-load safe-path</code> value can be also overriden by
|
||
|
|
<small>GDB</small> configuration option <samp>--with-auto-load-safe-path</samp>.
|
||
|
|
</p>
|
||
|
|
<p>Setting this variable to <samp>/</samp> disables this security protection,
|
||
|
|
corresponding <small>GDB</small> configuration option is
|
||
|
|
<samp>--without-auto-load-safe-path</samp>.
|
||
|
|
This variable is supposed to be set to the system directories writable by the
|
||
|
|
system superuser only. Users can add their source directories in init files in
|
||
|
|
their home directories (see <a href="Startup.html#Home-Directory-Init-File">Home Directory Init File</a>). See also deprecated
|
||
|
|
init file in the current directory
|
||
|
|
(see <a href="Startup.html#Init-File-in-the-Current-Directory-during-Startup">Init File in the Current Directory during Startup</a>).
|
||
|
|
</p>
|
||
|
|
<p>To force <small>GDB</small> to load the files it declined to load in the previous
|
||
|
|
example, you could use one of the following ways:
|
||
|
|
</p>
|
||
|
|
<dl compact="compact">
|
||
|
|
<dt><samp>~/.gdbinit</samp>: ‘<samp>add-auto-load-safe-path ~/src/gdb</samp>’</dt>
|
||
|
|
<dd><p>Specify this trusted directory (or a file) as additional component of the list.
|
||
|
|
You have to specify also any existing directories displayed by
|
||
|
|
by ‘<samp>show auto-load safe-path</samp>’ (such as ‘<samp>/usr:/bin</samp>’ in this example).
|
||
|
|
</p>
|
||
|
|
</dd>
|
||
|
|
<dt><kbd>gdb -iex "set auto-load safe-path /usr:/bin:~/src/gdb" …</kbd></dt>
|
||
|
|
<dd><p>Specify this directory as in the previous case but just for a single
|
||
|
|
<small>GDB</small> session.
|
||
|
|
</p>
|
||
|
|
</dd>
|
||
|
|
<dt><kbd>gdb -iex "set auto-load safe-path /" …</kbd></dt>
|
||
|
|
<dd><p>Disable auto-loading safety for a single <small>GDB</small> session.
|
||
|
|
This assumes all the files you debug during this <small>GDB</small> session will come
|
||
|
|
from trusted sources.
|
||
|
|
</p>
|
||
|
|
</dd>
|
||
|
|
<dt><kbd>./configure --without-auto-load-safe-path</kbd></dt>
|
||
|
|
<dd><p>During compilation of <small>GDB</small> you may disable any auto-loading safety.
|
||
|
|
This assumes all the files you will ever debug with this <small>GDB</small> come from
|
||
|
|
trusted sources.
|
||
|
|
</p></dd>
|
||
|
|
</dl>
|
||
|
|
|
||
|
|
<p>On the other hand you can also explicitly forbid automatic files loading which
|
||
|
|
also suppresses any such warning messages:
|
||
|
|
</p>
|
||
|
|
<dl compact="compact">
|
||
|
|
<dt><kbd>gdb -iex "set auto-load no" …</kbd></dt>
|
||
|
|
<dd><p>You can use <small>GDB</small> command-line option for a single <small>GDB</small> session.
|
||
|
|
</p>
|
||
|
|
</dd>
|
||
|
|
<dt><samp>~/.gdbinit</samp>: ‘<samp>set auto-load no</samp>’</dt>
|
||
|
|
<dd><p>Disable auto-loading globally for the user
|
||
|
|
(see <a href="Startup.html#Home-Directory-Init-File">Home Directory Init File</a>). While it is improbable, you could also
|
||
|
|
use system init file instead (see <a href="System_002dwide-configuration.html#System_002dwide-configuration">System-wide configuration</a>).
|
||
|
|
</p></dd>
|
||
|
|
</dl>
|
||
|
|
|
||
|
|
<p>This setting applies to the file names as entered by user. If no entry matches
|
||
|
|
<small>GDB</small> tries as a last resort to also resolve all the file names into
|
||
|
|
their canonical form (typically resolving symbolic links) and compare the
|
||
|
|
entries again. <small>GDB</small> already canonicalizes most of the filenames on its
|
||
|
|
own before starting the comparison so a canonical form of directories is
|
||
|
|
recommended to be entered.
|
||
|
|
</p>
|
||
|
|
<hr>
|
||
|
|
<div class="header">
|
||
|
|
<p>
|
||
|
|
Next: <a href="Auto_002dloading-verbose-mode.html#Auto_002dloading-verbose-mode" accesskey="n" rel="next">Auto-loading verbose mode</a>, Previous: <a href="libthread_005fdb_002eso_002e1-file.html#libthread_005fdb_002eso_002e1-file" accesskey="p" rel="prev">libthread_db.so.1 file</a>, Up: <a href="Auto_002dloading.html#Auto_002dloading" accesskey="u" rel="up">Auto-loading</a> [<a href="index.html#SEC_Contents" title="Table of contents" rel="contents">Contents</a>][<a href="Concept-Index.html#Concept-Index" title="Index" rel="index">Index</a>]</p>
|
||
|
|
</div>
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
</body>
|
||
|
|
</html>
|