[tor-bugs] #13359 [Tor Browser]: Linux: update fails because bundled libstdc++.so.6 is not found

[Tor Bug Tracker & Wiki]

#13359: Linux: update fails because bundled libstdc++.so.6 is not found
-----------------------------+----------------------
     Reporter:  mcs          |      Owner:  gk
         Type:  defect       |     Status:  new
     Priority:  normal       |  Milestone:
    Component:  Tor Browser  |    Version:
   Resolution:               |   Keywords:  ff31-esr
Actual Points:               |  Parent ID:
       Points:               |
-----------------------------+----------------------

Comment (by gk):

 Replying to [ticket:13359 mcs]:
 > Can we use -rpath at link time instead or will that cause other
 problems?

 My first guess is that is will break one part of our hardening. We had the
 RPATH for a while available, see #9150. Then some jerk showed up on the
 forum and explained how this may easily be exploited:
 https://blog.torproject.org/blog/tor-browser-365-and-40-alpha-2-are-
 released#comment-74540. If your solutions leads to the same issue I'd
 rather avoid that.

 I wonder how tor is starting properly up at all after the update as it
 definitely needs the LD_LIBRARY_PATH. Or are we just lucky to have the
 libs on our system and thus, we don't see this problem during testing?
 Assuming the LD_LIBRARY_PATH is somehow working for tor but not Tor
 Browser, what is happening if you put the libstdc++ into the directory
 where all the libs are that tor needs and do the update then (assuming we
 put the library there and not into /Browser)? Could you test that
 scenario?

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/13359#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online