From owner-freebsd-hackers Mon Oct 23 17:15:00 1995 Return-Path: owner-hackers Received: (from root@localhost) by freefall.freebsd.org (8.6.12/8.6.6) id RAA09561 for hackers-outgoing; Mon, 23 Oct 1995 17:15:00 -0700 Received: from aslan.cdrom.com (aslan.cdrom.com [192.216.223.142]) by freefall.freebsd.org (8.6.12/8.6.6) with ESMTP id RAA09556 for ; Mon, 23 Oct 1995 17:14:57 -0700 Received: from localhost.cdrom.com (localhost.cdrom.com [127.0.0.1]) by aslan.cdrom.com (8.6.12/8.6.9) with SMTP id RAA21318; Mon, 23 Oct 1995 17:14:34 -0700 Message-Id: <199510240014.RAA21318@aslan.cdrom.com> X-Authentication-Warning: aslan.cdrom.com: Host localhost.cdrom.com didn't use HELO protocol To: =?KOI8-R?Q?=E1=CE=C4=D2=C5=CA_=FE=C5=D2=CE=CF=D7?= (aka Andrey A. Chernov, Black Mage) cc: "Justin T. Gibbs" , ache@freefall.freebsd.org, freebsd-hackers@freebsd.org, John Polstra Subject: Re: ld.so, LD_NOSTD_PATH, and suid/sgid programs In-reply-to: Your message of "Tue, 24 Oct 1995 02:58:52 +0300." Date: Mon, 23 Oct 1995 17:14:34 -0700 From: "Justin T. Gibbs" Sender: owner-hackers@freebsd.org Precedence: bulk >In message <199510232319.QAA21109@aslan.cdrom.com> Justin T. Gibbs > writes: > >>UN*X systems have clasically given you a shotgun powerfull enough >>to blow your foot off. If you are knowledgeable enough to use >>LD_NOSTD_PATH, then you should know its effects. Since it is not >>a security problem, I don't think it should be removed (as I said >>in other mail on this subject). > >Well, but already existen shell scripts, i.e. admin things knows >nothing about possibility of failing via LD_NOSTD_PATH. >I.e. when they calls "su -c ..." they assume that this command >NOT fails. They even disable ^C somethimes to be shure. >But LD_NOSTD_PATH as very recent addition and I see no one >script which care of it. But anyone who sets LD_NOSTD_PATH will not be able to run *anything* shared unless the have a sane LD_LIBRARY_PATH. This is not a shell script only problem and I don't think the change is appropriate. >-- >Andrey A. Chernov : And I rest so composedly, /Now, in my bed, >ache@astral.msk.su : That any beholder /Might fancy me dead - >http://dt.demos.su/~ache : Might start at beholding me, /Thinking me dead. >RELCOM Team,FreeBSD Team : E.A.Poe From "For Annie" 1849 -- Justin T. Gibbs =========================================== Software Developer - Walnut Creek CDROM FreeBSD: Turning PCs into workstations ===========================================