FWD: Re: ld confusion
Redhat has disabled the LD_PRELOAD for suid programs, and don't appear to be
experiencing any trouble from it. Seems we could safely do the same then.
-----Forwarded message from Cristian Gafton <gafton@REDHAT.COM>-----
Return-Path: <owner-bugtraq@NETSPACE.ORG>
Delivered-To: joey@KITE.ML.ORG
Received: (qmail 13951 invoked from network); 11 Feb 1998 17:11:50 -0000
Received: from brimstone.netspace.org (128.148.157.143)
by gateway.kitenet.net with SMTP; 11 Feb 1998 17:11:50 -0000
Received: from unknown@netspace.org (port 12872 [128.148.157.6]) by brimstone.netspace.org with ESMTP id <1716-224>; Wed, 11 Feb 1998 11:41:18 -0500
Received: from NETSPACE.ORG by NETSPACE.ORG (LISTSERV-TCP/IP release 1.8c) with
spool id 7633606 for BUGTRAQ@NETSPACE.ORG; Wed, 11 Feb 1998 11:31:29
-0500
Received: from brimstone.netspace.org (brimstone.netspace.org
[128.148.157.143]) by netspace.org (8.8.7/8.8.2) with ESMTP id
LAA05426 for <BUGTRAQ@NETSPACE.ORG>; Wed, 11 Feb 1998 11:28:11 -0500
Received: from unknown@netspace.org (port 12872 [128.148.157.6]) by
brimstone.netspace.org with ESMTP id <1479-228>; Wed, 11 Feb 1998
11:27:28 -0500
Approved-By: aleph1@UNDERGROUND.ORG
Received: from lacrosse.redhat.com (lacrosse.redhat.com [207.175.42.154]) by
netspace.org (8.8.7/8.8.2) with ESMTP id KAA30675 for
<BUGTRAQ@NETSPACE.ORG>; Wed, 11 Feb 1998 10:53:57 -0500
Received: from alien.redhat.com (alien.redhat.com [207.175.42.9]) by
lacrosse.redhat.com (8.8.7/8.8.7) with ESMTP id KAA25015 for
<BUGTRAQ@NETSPACE.ORG>; Wed, 11 Feb 1998 10:53:52 -0500
Received: from localhost (gafton@localhost) by alien.redhat.com (8.8.7/8.8.7)
with SMTP id KAA30085 for <BUGTRAQ@NETSPACE.ORG>; Wed, 11 Feb 1998
10:53:51 -0500
X-Authentication-Warning: alien.redhat.com: gafton owned process doing -bs
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Message-ID: <Pine.LNX.3.96.980211104949.30073B-100000@alien.redhat.com>
Date: Wed, 11 Feb 1998 10:53:51 -0500
Reply-To: Cristian Gafton <gafton@REDHAT.COM>
Sender: Bugtraq List <BUGTRAQ@NETSPACE.ORG>
From: Cristian Gafton <gafton@REDHAT.COM>
Subject: Re: ld confusion
To: BUGTRAQ@NETSPACE.ORG
In-Reply-To: <Pine.SUN.3.94.980210121629.22048F-100000@dfw.dfw.net>
On Tue, 10 Feb 1998, Aleph One wrote:
> The GNU dynamic linker in a similar move ignored LD_PRELOAD for
> setuid/guid binaries. Ulrich Drepper changed it to allow loading
> "securely" libraries from LD_PRELOAD for setuid/gid programs on Jan 20,
> 1997 (version???).
... Move that was debated to death on glibc mailing lists. At Red Hat we
have patched out that "feature". The updated glibc we provide on our
updates dir ignores LD_PRELOAD for setuid/giod programs unless they are
run by root.
> The correct solution is to ignore
> LD_PRELOAD for setuid/gid program
Amen!
:-)
Cristian
--
----------------------------------------------------------------------
Cristian Gafton -- gafton@redhat.com -- Red Hat Software, Inc.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
UNIX is user friendly. It's just selective about who its friends are.
-----End of forwarded message-----
--
see shy jo
--
TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word "unsubscribe" to
debian-devel-request@lists.debian.org .
Trouble? e-mail to templin@bucknell.edu .
Reply to: