[369] in bugtraq
Re: /dev/tcp, and a LD_LIBRARY_PATH question.
daemon@ATHENA.MIT.EDU (hoodr@hoodr.slip.netcom.com)
Tue Dec 6 00:29:48 1994
From: hoodr@hoodr.slip.netcom.com
Date: Mon, 5 Dec 1994 19:37:14 +0000
In-Reply-To: Doug Hughes <Doug.Hughes@Eng.Auburn.EDU>
"Re: /dev/tcp, and a LD_LIBRARY_PATH question." (Dec 5, 12:49pm)
To: Doug Hughes <Doug.Hughes@Eng.Auburn.EDU>, jim@Tadpole.COM,
ken@zeus.ST.3Com.COM
Cc: bugtraq@fc.net
>If I recall correctly, (I could be wrong), was the original discussion
>about sudo? If so, why not statically link it? (I'm not discounting
>the importance of the LD_* problem).
Thats not the problem. Sudo is setuid, so the LD_* variables are
ignored anyway. The problem is that sudo executes other programs
as root, without clearing the environment variables. Since the other
programs are NOT suid, they WILL listed to the LD_* variables.
