discuss-gnustep
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Setting up GNUstep.sh on system profile loses LD_LIBRARY_PATH


From: David Chisnall
Subject: Re: Setting up GNUstep.sh on system profile loses LD_LIBRARY_PATH
Date: Thu, 3 Dec 2015 09:50:23 +0000

On 3 Dec 2015, at 09:37, Luis Garcia Alanis <luis@garcia.tv> wrote:
> 
> On Linux, when a setuid (or setgid) program is ran, it does not receive 
> certain environment variables (including LD_LIBRARY_PATH, several other LD_* 
> variables, and HOSTALIASES), in order to reduce the possible attack points: 
> Otherwise you could write a small library and trick su orsudo into calling 
> your "improved" functions that way

We really should be using -rpath when building to specify the location of 
libraries (giving an $ORIGIN-relative path to each of the install locations).  
This will also require us to install shell scripts, rather than symlinks, into 
bin/ for starting tools from a default path, because otherwise the rpath will 
be relative to the wrong thing (as I discovered when using rpath for a library 
shipped inside the .app bundle).

David

--
This email complies with ISO 3103




reply via email to

[Prev in Thread] Current Thread [Next in Thread]