From owner-freebsd-hackers Mon Oct 23 17:10:06 1995 Return-Path: owner-hackers Received: (from root@localhost) by freefall.freebsd.org (8.6.12/8.6.6) id RAA09148 for hackers-outgoing; Mon, 23 Oct 1995 17:10:06 -0700 Received: from who.cdrom.com (who.cdrom.com [192.216.222.3]) by freefall.freebsd.org (8.6.12/8.6.6) with ESMTP id RAA09140 for ; Mon, 23 Oct 1995 17:10:01 -0700 Received: from rocky.sri.MT.net (sri.MT.net [204.94.231.129]) by who.cdrom.com (8.6.12/8.6.11) with ESMTP id RAA05000 for ; Mon, 23 Oct 1995 17:08:49 -0700 Received: (from nate@localhost) by rocky.sri.MT.net (8.6.12/8.6.12) id SAA24195; Mon, 23 Oct 1995 18:10:45 -0600 Date: Mon, 23 Oct 1995 18:10:45 -0600 From: Nate Williams Message-Id: <199510240010.SAA24195@rocky.sri.MT.net> To: =?KOI8-R?Q?=E1=CE=C4=D2=C5=CA_=FE=C5=D2=CE=CF=D7?= (aka Andrey A. Chernov, Black Mage) Cc: Nate Williams , ache@freefall.freebsd.org, freebsd-hackers@freebsd.org, John Polstra Subject: Re: ld.so, LD_NOSTD_PATH, and suid/sgid programs In-Reply-To: References: <199510232318.RAA24039@rocky.sri.MT.net> Sender: owner-hackers@freebsd.org Precedence: bulk > >> >Can you see a security reason for disabling LD_NOSTD_PATH for suid/sgid > >> >programs? If not, I think that the recent change should be removed from > >> >rtld.c. > >> > >> In this case I keep in mind some shell script execution which calls > >> setuid programs. By setiing LD_NOSTD_PATH user allows such > >> programs easily fails, it is clear. > > >Why should a program which calls setuid programs fail in the first > >place? If they are calling a setuid program it will still only look in > >the 'normal' places for shlibs, which means they are safe. > > If user set LD_NOSTD_PATH it *NOT* look for normal places anymore. Then a system shared binary is *completely* and *utterly* useless. Anyone who writes programs that writes shells scripts that depend on system routines working with LD_NOSTD_PATH should deserve the error messages they get. Why are we un-necessarily complicating the runtime loader with this? Given this, I say the change is gratitious and un-needed. Nate