Bug 154844

Description:
Hi.
From the news https://hardenedbsd.org/article/shawn-webb/2022-06-28/hardenedbsd-june-2022-status-report

-----
I plan to MFC all of the above to 13-STABLE soon. If you build your own packages or ports, please take special note of item four above. Here's a few more details on how we've hardened the RTLD (when hardening.harden_rtld is set to 1):

    LD_PRELOAD is fully prohibited.
    Set dangerous_ld_env, which isn't used much in the RTLD, but could be used more in the future.
    Sensitive LD_* environment variables are scrubbed.
    Using the RTLD to execute applications is prohibited.
    Tracing of loaded objects is prohibited. This change in particular breaks ldd(1), which is used by a lot of ports during the build process. This is what can cause the most headaches.
-----

it says that a new parameter hardening.harden_rtld has been added
By default hardening.harden_rtld parameter is 1
in this case libreoffice does not start

# libreoffice
ld-elf.so.1: Shared object "libuno_sal.so.3" not found, required by "oosplash"

# pkg info -l libreoffice | grep libuno_sal.so.3
/usr/local/lib/libreoffice/program/libuno_sal.so.3

# ldd /usr/local/lib/libreoffice/program/oosplash
/usr/local/lib/libreoffice/program/oosplash:
ld-elf.so.1: Tainted process refusing to run binary /libexec/ld-elf.so.1
/usr/local/lib/libreoffice/program/oosplash: exit status 1

If set hardening.harden_rtld: 0
then libreoffice starts correctly

# ldd /usr/local/lib/libreoffice/program/oosplash
/usr/local/lib/libreoffice/program/oosplash:
libXinerama.so.1 => /usr/local/lib/libXinerama.so.1 (0x1a0d1ae2000)
libX11.so.6 => /usr/local/lib/libX11.so.6 (0x1a0d1ae7000)
libpng16.so.16 => /usr/local/lib/libpng16.so.16 (0x1a0d1c43000)
libuno_sal.so.3 => /usr/local/lib/libreoffice/program/libuno_sal.so.3 (0x1a0d1c87000)
libthr.so.3 => /lib/libthr.so.3 (0x1a0d1d04000)
libc.so.7 => /lib/libc.so.7 (0x1a0d1d31000)
libXext.so.6 => /usr/local/lib/libXext.so.6 (0x1a0d213d000)
libxcb.so.1 => /usr/local/lib/libxcb.so.1 (0x1a0d2154000)
libz.so.6 => /lib/libz.so.6 (0x1a0d2187000)
libm.so.5 => /lib/libm.so.5 (0x1a0d21a4000)
libc++.so.1 => /usr/lib/libc++.so.1 (0x1a0d21e0000)
libcxxrt.so.1 => /lib/libcxxrt.so.1 (0x1a0d22e8000)
libgcc_s.so.1 => /lib/libgcc_s.so.1 (0x1a0d230a000)
libXau.so.6 => /usr/local/lib/libXau.so.6 (0x1a0d2324000)
libXdmcp.so.6 => /usr/local/lib/libXdmcp.so.6 (0x1a0d232a000)
[vdso] (0x7fdbd1562000)



Я создал тикет для обсуждения данной проблемы на hardenedbsd.org:
https://git.hardenedbsd.org/hardenedbsd/HardenedBSD/-/issues/86


Steps to Reproduce:
1. Run "libreoffice"


Actual Results:
# libreoffice
ld-elf.so.1: Shared object "libuno_sal.so.3" not found, required by "oosplash"

Expected Results:
Successful launch of libreoffice


Reproducible: Always


User Profile Reset: Yes

Additional Info:
https://git.hardenedbsd.org/hardenedbsd/HardenedBSD/-/issues/86