From owner-freebsd-hackers Mon Oct 23 20:35:26 1995 Return-Path: owner-hackers Received: (from root@localhost) by freefall.freebsd.org (8.6.12/8.6.6) id UAA29260 for hackers-outgoing; Mon, 23 Oct 1995 20:35:26 -0700 Received: from sequent.kiae.su (sequent.kiae.su [144.206.136.6]) by freefall.freebsd.org (8.6.12/8.6.6) with SMTP id UAA29248 for ; Mon, 23 Oct 1995 20:35:18 -0700 Received: by sequent.kiae.su id AA04988 (5.65.kiae-2 ); Tue, 24 Oct 1995 07:20:00 +0400 Received: by sequent.KIAE.su (UUMAIL/2.0); Tue, 24 Oct 95 07:19:59 +0300 Received: (from ache@localhost) by ache.dialup.demos.ru (8.6.11/8.6.9) id GAA00475; Tue, 24 Oct 1995 06:17:58 +0300 To: Nate Williams Cc: ache@freefall.freebsd.org, freebsd-hackers@freebsd.org, "Justin T. Gibbs" References: <199510240014.RAA21318@aslan.cdrom.com> <199510240245.UAA24602@rocky.sri.MT.net> In-Reply-To: <199510240245.UAA24602@rocky.sri.MT.net>; from Nate Williams at Mon, 23 Oct 1995 20:45:55 -0600 Message-Id: Organization: Olahm Ha-Yetzirah Date: Tue, 24 Oct 1995 06:17:58 +0300 (MSK) X-Mailer: Mail/@ [v2.40 FreeBSD] From: =?KOI8-R?Q?=E1=CE=C4=D2=C5=CA_=FE=C5=D2=CE=CF=D7?= (aka Andrey A. Chernov, Black Mage) X-Class: Fast Subject: Re: ld.so, LD_NOSTD_PATH, and suid/sgid programs Lines: 37 Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Content-Length: 1494 Sender: owner-hackers@freebsd.org Precedence: bulk In message <199510240245.UAA24602@rocky.sri.MT.net> Nate Williams writes: >I agree, and it appears that David and John P. are also in agreement. Well, I and Terry in agreement :-) >Since it is a very recent addition, as Justin pointed out that if they >are knowledgable enough to use it, they should know how to use it. Hackers always know and will use it. >One, I find it hard to believe a program will work because it's in >memory even though the shlibs can't be found, and secondly any script Want experiment? Well. Start tcsh (it is dynamic). Then remove ld.so.hints or use ldconfig -s. You still can prefectly works in shell, but all share binaries dumps core. Don't forget to reboot after. >that needs to know that the programs it calls are linked static/shared >is completely unportable. I agree. As I already mention, all previously existen and working secure shell scripts becomes completely unportable, if my fix not be commited. >If you can't give a specific and useful example of *why* it's a good >reason to do, I'm backing out the change with the speedup changes I'll >be committing as soon as my tests complete. Well, I send this script already two times. Want yet once? -- Andrey A. Chernov : And I rest so composedly, /Now, in my bed, ache@astral.msk.su : That any beholder /Might fancy me dead - http://dt.demos.su/~ache : Might start at beholding me, /Thinking me dead. RELCOM Team,FreeBSD Team : E.A.Poe From "For Annie" 1849