[Top][All Lists]
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [gpsd-dev] [PATCH 2/3] always link against local libraries
From: |
Mike Frysinger |
Subject: |
Re: [gpsd-dev] [PATCH 2/3] always link against local libraries |
Date: |
Mon, 21 Nov 2011 11:27:47 -0500 |
User-agent: |
KMail/1.13.7 (Linux/3.1.1; KDE/4.6.5; x86_64; ; ) |
On Monday 21 November 2011 03:03:40 Eric S. Raymond wrote:
> Mike Frysinger <address@hidden>:
> > Linking against the local libraries should not depend on chrpath. We
> > always want to search $PWD for static and shared so we can find things
> > via -lgpsd.
>
> Unfortunately, this is exactly wrong for binsries that might be installed
> in system space. As with RPATH, it creates an attack path for a
> maliciously crafted library.
that makes no sense. it's linking against $PWD which is where things are
being compiled.
-mike
signature.asc
Description: This is a digitally signed message part.
[gpsd-dev] [PATCH 3/3] make chrpath optional, Mike Frysinger, 2011/11/20