[6113] in bugtraq
Re: ld confusion
daemon@ATHENA.MIT.EDU (Cristian Gafton)
Wed Feb 11 11:56:58 1998
Date: Wed, 11 Feb 1998 10:53:51 -0500
Reply-To: Cristian Gafton <gafton@REDHAT.COM>
From: Cristian Gafton <gafton@REDHAT.COM>
To: BUGTRAQ@NETSPACE.ORG
In-Reply-To: <Pine.SUN.3.94.980210121629.22048F-100000@dfw.dfw.net>
On Tue, 10 Feb 1998, Aleph One wrote:
> The GNU dynamic linker in a similar move ignored LD_PRELOAD for
> setuid/guid binaries. Ulrich Drepper changed it to allow loading
> "securely" libraries from LD_PRELOAD for setuid/gid programs on Jan 20,
> 1997 (version???).
... Move that was debated to death on glibc mailing lists. At Red Hat we
have patched out that "feature". The updated glibc we provide on our
updates dir ignores LD_PRELOAD for setuid/giod programs unless they are
run by root.
> The correct solution is to ignore
> LD_PRELOAD for setuid/gid program
Amen!
:-)
Cristian
--
----------------------------------------------------------------------
Cristian Gafton -- gafton@redhat.com -- Red Hat Software, Inc.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
UNIX is user friendly. It's just selective about who its friends are.
