Date: Mon, 23 Oct 1995 20:33:33 -0600 From: Nate Williams <nate@rocky.sri.MT.net> To: =?KOI8-R?Q?=E1=CE=C4=D2=C5=CA_=FE=C5=D2=CE=CF=D7?= (aka Andrey A. Chernov, Black Mage) <ache@astral.msk.su> Cc: Nate Williams <nate@rocky.sri.MT.net>, ache@freefall.freebsd.org, freebsd-hackers@freebsd.org Subject: Re: ld.so, LD_NOSTD_PATH, and suid/sgid programs Message-ID: <199510240233.UAA24556@rocky.sri.MT.net> In-Reply-To: <Cax53Zm0GT@ache.dialup.demos.ru> References: <m0t7SFB-000078C@seattle.polstra.com> <Aagc1ZmOzJ@ache.dialup.demos.ru> <199510232318.RAA24039@rocky.sri.MT.net> <Faij2Zmq8S@ache.dialup.demos.ru> <199510240010.SAA24195@rocky.sri.MT.net> <Cax53Zm0GT@ache.dialup.demos.ru>
next in thread | previous in thread | raw e-mail | index | archive | help
[ Disabling LD_NOSTD_PATH for suid/guid programs ] > >> If user set LD_NOSTD_PATH it *NOT* look for normal places anymore. > > >Then a system shared binary is *completely* and *utterly* useless. > > Do you mean our /usr/bin/su useless f.e.? > Or maybe /usr/sbin/sendmail? If you unset LD_NOSTD_PATH with these programs they will fail, since they will not be able to find their shlibs. There are *NO* known security risk by leaving the standard library path set in these programs. > All shell scripts writted prior LD_NOSTD_PATH or writted not > in FreeBSD (f.e. SysV scriprs) deserve not only error messages > they get but unpredicatable code flow after it. Huh? > >Given this, I say the change is gratitious and un-needed. > > You need to prove it, not just say. You can't provide me an example where unsetting LD_NOSTD_PATH is needed, so I would say that the burden of proof is on you. Nate
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199510240233.UAA24556>