[compiler-rt] [sanitizer] Disable writes to log files for binaries in a secure context. (PR #92593)

[via llvm-commits]

bigb4ng wrote:

Upon revisiting this PR, I have devised an alternative solution. We can enhance security by implementing a privilege-dropping mechanism when writing log files. This would involve temporarily dropping effective user and group IDs, as well as effective capabilities, when obtaining a log file descriptor.

This approach should effectively mitigate the attack surface exposed through command-line arguments. However, I have yet to formulate an equivalent solution for addressing potential SELinux use cases. 

I welcome all insights and suggestions.

https://github.com/llvm/llvm-project/pull/92593