[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: GNUstep.sh / env sanity patches
From: |
Jeff Teunissen |
Subject: |
Re: GNUstep.sh / env sanity patches |
Date: |
Fri, 20 Aug 2004 04:56:06 -0400 |
Nicola Pero wrote:
> > > ... I guess I don't see the trouble setting up /etc/profile (or
> > > other similar methods) when a user logs in. All distributions
> > > handle this differently, but with the same end results.
> >
> > You're right, but he suggested modifying ld.so.conf, to include
> > library paths for EVERY user. Using /etc/profile to set up
> > LD_LIBRARY_PATH is fine, and the Right Way IMHO.
>
> You're of course aware that setuid executables ignore LD_LIBRARY_PATH
> for security reasons so unless you add GNUstep library paths to
> ld.so.conf, you will never be able to execute a setuid executable
> compiled using GNUstep.
I wouldn't allow a setuid executable using GNUstep libs to exist on my
system, for the same reason GTK+ doesn't allow itself to run setuid.
--
| Jeff Teunissen -=- Pres., Dusk To Dawn Computing -=- deek @ d2dc.net
| GPG: 1024D/9840105A 7102 808A 7733 C2F3 097B 161B 9222 DAB8 9840 105A
| Core developer, The QuakeForge Project http://www.quakeforge.net/
| Specializing in Debian GNU/Linux http://www.d2dc.net/~deek/
- Re: GNUstep.sh / env sanity patches, (continued)
Re: GNUstep.sh / env sanity patches, John Davidorff Pell, 2004/08/19
Re: GNUstep.sh / env sanity patches, John Davidorff Pell, 2004/08/19
Re: GNUstep.sh / env sanity patches, John Davidorff Pell, 2004/08/19