5.x: userland writes to /usr/lib64/firefox/libxul.so

From: Udo van den Heuvel
Date: Thu Apr 09 2020 - 09:22:13 EST


Hello,

In a bug at https://bugzilla.redhat.com/show_bug.cgi?id=1789477 we found
that firefox (running as a user) can somehow, sometimes write to
/usr/lib64/firefox/libxul.so when it (partly) crashes.
This may point to a situation that should not occur: the library in
question is owned by root and not writable by the user via conventional
methods.
Can anyone confirm this?
How can we approach to solving this issue?
Is this a possible kernel issue?
Or perhaps a linker issue?

Please explain...

Kind regards,
Udo