Hardened malloc: Difference between revisions

From Alpine Linux
mNo edit summary
(/etc/ld.so.preload is a glibc thing, not going to work on Alpine)
Line 7: Line 7:
{{note| Need Alpine Linux Edge with testing repo in <code>/etc/apk/repositories</code>}}
{{note| Need Alpine Linux Edge with testing repo in <code>/etc/apk/repositories</code>}}
{{cmd| $ doas apk add hardened-malloc}}
{{cmd| $ doas apk add hardened-malloc}}
{{cmd| $ doas echo "/usr/lib/libhardened_malloc.so" > /etc/ld.so.preload}}
 
Then you can set <code>LD_PRELOAD="/usr/lib/libhardened_malloc.so"</code> while launching individual applications or before your window manager starts if you prefer.


=== External sources ===
=== External sources ===

Revision as of 19:16, 16 January 2025

What is it?

An excerpt on github [1]:

This is a security-focused general purpose memory allocator providing the malloc API along with various extensions. It provides substantial hardening against heap corruption vulnerabilities.

How to use

Note: Need Alpine Linux Edge with testing repo in /etc/apk/repositories

$ doas apk add hardened-malloc

Then you can set LD_PRELOAD="/usr/lib/libhardened_malloc.so" while launching individual applications or before your window manager starts if you prefer.

External sources

Hardened malloc github