Bugtraq mailing list archives

Re: /dev/tcp, and a LD_LIBRARY_PATH question.


From: hoodr () hoodr slip netcom com (hoodr () hoodr slip netcom com)
Date: Mon, 5 Dec 1994 19:37:14 +0000


If I recall correctly, (I could be wrong), was the original discussion
about sudo? If so, why not statically link it? (I'm not discounting
the importance of the LD_* problem).

Thats not the problem.  Sudo is setuid, so the LD_* variables are
ignored anyway.  The problem is that sudo executes other programs
as root, without clearing the environment variables.  Since the other
programs are NOT suid, they WILL listed to the LD_* variables.



Current thread: