> The GNU dynamic linker in a similar move ignored LD_PRELOAD for
> setuid/guid binaries. Ulrich Drepper changed it to allow loading
> "securely" libraries from LD_PRELOAD for setuid/gid programs on Jan 20,
> 1997 (version???).
... Move that was debated to death on glibc mailing lists. At Red Hat we
have patched out that "feature". The updated glibc we provide on our
updates dir ignores LD_PRELOAD for setuid/giod programs unless they are
run by root.
> The correct solution is to ignore
> LD_PRELOAD for setuid/gid program
Amen!
:-)
Cristian
-- ---------------------------------------------------------------------- Cristian Gafton -- gafton@redhat.com -- Red Hat Software, Inc. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ UNIX is user friendly. It's just selective about who its friends are.