Re: question about libclntsh.so

From: Homer Wells <hwells_at_no.spam.to>
Date: Thu, 19 Dec 2002 03:37:15 GMT
Message-ID: <L9bM9.393781$P31.144309@rwcrnsc53>

music4 wrote:

> "Jens Schweikhardt" <usenet_at_schweikhardt.net> wrote in message

>>Yes; setuid programs will not search some random LD_LIBRARY_PATH for
>>libraries for security reasons. Just think of someone setting
>>LD_LIBRARY_PATH to include his home directory and putting his own
>>libc.so there. Unlimited power if there is a dynamically linked
>>setuid root binary on the system (and usually there are dozens).
>>
>>You have to put your libclntsh.so in the restricted LD_LIBRARY_PATH or
>>run your app as user oracle with su or sudo, say.

> 
> Thans for Jens's answer. That's reasonable. But where is the restricted
> LD_LIBRARY_PATH?

These details are platform dependent and you didn't mention your platform. On Solaris, "man ld.so.1" and "man crle". Search for "SECURITY".

HoWe Received on Wed Dec 18 2002 - 21:37:15 CST