From owner-cvs-all  Tue Jul 25 21:47:20 2000
Delivered-To: cvs-all@freebsd.org
Received: from freefall.freebsd.org (freefall.FreeBSD.ORG [204.216.27.21])
	by hub.freebsd.org (Postfix) with ESMTP
	id 1DD6F37B555; Tue, 25 Jul 2000 21:47:18 -0700 (PDT)
	(envelope-from jdp@FreeBSD.org)
Received: (from jdp@localhost)
	by freefall.freebsd.org (8.9.3/8.9.2) id VAA44122;
	Tue, 25 Jul 2000 21:47:17 -0700 (PDT)
	(envelope-from jdp@FreeBSD.org)
Message-Id: <200007260447.VAA44122@freefall.freebsd.org>
From: John Polstra <jdp@FreeBSD.org>
Date: Tue, 25 Jul 2000 21:47:17 -0700 (PDT)
To: cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org
Subject: cvs commit: src/sbin/ldconfig elfhints.c ldconfig.8 ldconfig.c
X-FreeBSD-CVS-Branch: HEAD
Sender: owner-cvs-all@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

jdp         2000/07/25 21:47:17 PDT

  Modified files:
    sbin/ldconfig        elfhints.c ldconfig.8 ldconfig.c 
  Log:
  If a directory is world-writable or is not owned by root, skip it
  and emit a warning.  This is a security measure since ldconfig
  influences the shared libraries used by all programs.
  
  I think the check should be made even more stringent by also
  ignoring group-writable directories.  I will make that change soon
  unless we encounter a good reason not to do it.
  
  Submitted by:	Maxime Henrion <mhenrion@cybercable.fr>
  
  Revision  Changes    Path
  1.4       +17 -2     src/sbin/ldconfig/elfhints.c
  1.21      +5 -5      src/sbin/ldconfig/ldconfig.8
  1.33      +16 -1     src/sbin/ldconfig/ldconfig.c



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message