Re: question about libclntsh.so

From: music4 <cli4_at_lucent.com>
Date: Thu, 19 Dec 2002 09:01:19 +0800
Message-ID: <atr5p9$bnq@netnews.proxy.lucent.com>

"Jens Schweikhardt" <usenet_at_schweikhardt.net> wrote in message news:atphof$ql7$1_at_newsfeed.pit.comms.marconi.com...
> In comp.unix.programmer music4 <cli4_at_lucent.com> wrote:

>
> Yes; setuid programs will not search some random LD_LIBRARY_PATH for
> libraries for security reasons. Just think of someone setting
> LD_LIBRARY_PATH to include his home directory and putting his own
> libc.so there. Unlimited power if there is a dynamically linked
> setuid root binary on the system (and usually there are dozens).
>
> You have to put your libclntsh.so in the restricted LD_LIBRARY_PATH or
> run your app as user oracle with su or sudo, say.
>

Thans for Jens's answer. That's reasonable. But where is the restricted LD_LIBRARY_PATH? Evan Received on Wed Dec 18 2002 - 19:01:19 CST