From owner-freebsd-security  Wed Feb  5 03:08:45 1997
Return-Path: <owner-security>
Received: (from root@localhost)
          by freefall.freebsd.org (8.8.5/8.8.5) id DAA07458
          for security-outgoing; Wed, 5 Feb 1997 03:08:45 -0800 (PST)
Received: from gw-nl1.philips.com (gw-nl1.philips.com [192.68.44.33])
          by freefall.freebsd.org (8.8.5/8.8.5) with ESMTP id DAA07401;
          Wed, 5 Feb 1997 03:07:24 -0800 (PST)
Received: (from nobody@localhost) 
	by gw-nl1.philips.com (8.6.10/8.6.10-0.994n-08Nov95) id MAA21942; Wed, 5 Feb 1997 12:05:40 +0100
Received: from unknown(130.139.36.3) by gw-nl1.philips.com via smap (V1.3+ESMTP) with ESMTP
	id sma021806; Wed Feb  5 12:05:15 1997
Received: from bsd.lss.cp.philips.com (bsd.lss.cp.philips.com [130.144.199.33]) 
	by smtprelay.nl.cis.philips.com (8.6.10/8.6.10-1.2.1m-970131) with SMTP id MAA09574; Wed, 5 Feb 1997 12:05:14 +0100
Received: by bsd.lss.cp.philips.com (8.8.3/1.63)
    id MAA21662; Wed, 5 Feb 1997 12:05:13 +0100 (MET)
From: Guido.vanRooij@nl.cis.philips.com (Guido van Rooij)
Message-Id: <199702051105.MAA21662@bsd.lss.cp.philips.com>
Subject: Re: 2.1.6+++: crt0.c CRITICAL CHANGE
To: joerg_wunsch@uriah.heep.sax.de
Date: Wed, 5 Feb 1997 12:05:13 +0100 (MET)
Cc: jgreco@solaria.sol.net, core@freebsd.org, security@freebsd.org
In-Reply-To: <Mutt.19970204224228.j@uriah.heep.sax.de> from J Wunsch at "Feb 4, 97 10:42:28 pm"
X-Mailer: ELM [version 2.4ME+ PL22 (25)]
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Sender: owner-security@freebsd.org
X-Loop: FreeBSD.org
Precedence: bulk

J Wunsch wrote:
> As Joe Greco wrote:
> 
> > The following lines were removed:
> > 
> > #include <locale.h>
> > 
> > extern void           _startup_setlocale __P((int, const char *));
> > 
> > 	if (getenv("ENABLE_STARTUP_LOCALE") != NULL)
> > 		_startup_setlocale(LC_ALL, "");
> 
> I thought this has been removed long ago.
> 
> Go for it.  It has been found to be a poor concept anyway.

Yiou can use the lfix program to do so. It was posted by a Russian guy,
who's name I forgot. I added a fix so it can actually do the complete
filesystem in one sweep. Basically it patches the binary to replace
the above call by nop's.

-Guido