[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: GNUstep.sh / env sanity patches

From: Jeff Teunissen
Subject: Re: GNUstep.sh / env sanity patches
Date: Fri, 20 Aug 2004 04:56:06 -0400

Nicola Pero wrote:

> > > ... I guess I don't see the trouble setting up /etc/profile (or
> > > other similar methods) when a user logs in.  All distributions
> > > handle this differently, but with the same end results.
> >
> > You're right, but he suggested modifying ld.so.conf, to include
> > library paths for EVERY user. Using /etc/profile to set up
> > LD_LIBRARY_PATH is fine, and the Right Way IMHO.
> You're of course aware that setuid executables ignore LD_LIBRARY_PATH
> for security reasons so unless you add GNUstep library paths to
> ld.so.conf, you will never be able to execute a setuid executable
> compiled using GNUstep.

I wouldn't allow a setuid executable using GNUstep libs to exist on my
system, for the same reason GTK+ doesn't allow itself to run setuid.

| Jeff Teunissen  -=-  Pres., Dusk To Dawn Computing  -=-  deek @ d2dc.net
| GPG: 1024D/9840105A   7102 808A 7733 C2F3 097B  161B 9222 DAB8 9840 105A
| Core developer, The QuakeForge Project        http://www.quakeforge.net/
| Specializing in Debian GNU/Linux              http://www.d2dc.net/~deek/

reply via email to

[Prev in Thread] Current Thread [Next in Thread]