From owner-freebsd-hackers Mon Oct 23 17:26:25 1995 Return-Path: owner-hackers Received: (from root@localhost) by freefall.freebsd.org (8.6.12/8.6.6) id RAA10747 for hackers-outgoing; Mon, 23 Oct 1995 17:26:25 -0700 Received: from sequent.kiae.su (sequent.kiae.su [144.206.136.6]) by freefall.freebsd.org (8.6.12/8.6.6) with SMTP id RAA10733 for ; Mon, 23 Oct 1995 17:26:17 -0700 Received: by sequent.kiae.su id AA03520 (5.65.kiae-2 ); Tue, 24 Oct 1995 04:24:25 +0400 Received: by sequent.KIAE.su (UUMAIL/2.0); Tue, 24 Oct 95 04:24:24 +0300 Received: (from ache@localhost) by ache.dialup.demos.ru (8.6.11/8.6.9) id DAA07440; Tue, 24 Oct 1995 03:23:07 +0300 To: "Justin T. Gibbs" Cc: ache@freefall.freebsd.org, freebsd-hackers@freebsd.org, John Polstra References: <199510240014.RAA21318@aslan.cdrom.com> In-Reply-To: <199510240014.RAA21318@aslan.cdrom.com>; from "Justin T. Gibbs" at Mon, 23 Oct 1995 17:14:34 -0700 Message-Id: Organization: Olahm Ha-Yetzirah Date: Tue, 24 Oct 1995 03:23:07 +0300 (MSK) X-Mailer: Mail/@ [v2.40 FreeBSD] From: =?KOI8-R?Q?=E1=CE=C4=D2=C5=CA_=FE=C5=D2=CE=CF=D7?= (aka Andrey A. Chernov, Black Mage) X-Class: Fast Subject: Re: ld.so, LD_NOSTD_PATH, and suid/sgid programs Lines: 32 Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Content-Length: 1502 Sender: owner-hackers@freebsd.org Precedence: bulk In message <199510240014.RAA21318@aslan.cdrom.com> Justin T. Gibbs writes: >>In message <199510232319.QAA21109@aslan.cdrom.com> Justin T. Gibbs >> writes: >> >>>UN*X systems have clasically given you a shotgun powerfull enough >>>to blow your foot off. If you are knowledgeable enough to use >>>LD_NOSTD_PATH, then you should know its effects. Since it is not >>>a security problem, I don't think it should be removed (as I said >>>in other mail on this subject). >> >>Well, but already existen shell scripts, i.e. admin things knows >>nothing about possibility of failing via LD_NOSTD_PATH. >>I.e. when they calls "su -c ..." they assume that this command >>NOT fails. They even disable ^C somethimes to be shure. >>But LD_NOSTD_PATH as very recent addition and I see no one >>script which care of it. >But anyone who sets LD_NOSTD_PATH will not be able to run *anything* >shared unless the have a sane LD_LIBRARY_PATH. This is not a >shell script only problem and I don't think the change is appropriate. Well, we have a lot static utils, i.e. whole /bin, /sbin and few from other places. They still works in this situation. Moreover, current shared shell works too, it is already in memory. -- Andrey A. Chernov : And I rest so composedly, /Now, in my bed, ache@astral.msk.su : That any beholder /Might fancy me dead - http://dt.demos.su/~ache : Might start at beholding me, /Thinking me dead. RELCOM Team,FreeBSD Team : E.A.Poe From "For Annie" 1849