Date: Sun, 22 Oct 1995 14:26:42 -0700 From: "Justin T. Gibbs" <gibbs@freefall.freebsd.org> To: =?KOI8-R?Q?=E1=CE=C4=D2=C5=CA_=FE=C5=D2=CE=CF=D7?= (aka Andrey A. Chernov, Black Mage) <ache@astral.msk.su> Cc: "Justin T. Gibbs" <gibbs@freefall.freebsd.org>, CVS-commiters@freefall.freebsd.org, "Andrey A. Chernov" <ache@freefall.freebsd.org>, cvs-user@freefall.freebsd.org Subject: Re: cvs commit: src/secure/libexec/telnetd sys_term.c Message-ID: <199510222126.OAA17661@aslan.cdrom.com> In-Reply-To: Your message of "Sat, 21 Oct 1995 01:36:07 %2B0300." <YBNH2Ymu88@ache.dialup.demos.ru>
next in thread | previous in thread | raw e-mail | index | archive | help
>In message <199510202030.NAA10249@aslan.cdrom.com> Justin T. Gibbs > writes: > >>>1) No, LD_NOSTD_PATH have risk too. Unimplemented LD_PRELOAD have risk >>>too. > >>Not unless you also specify an LD_LIBRARY_PATH. > >No, LD_NOSTD_PATH treated separately. But the worst effect it can have is make a program not load because its shlibs aren't found unless you set LD_LIBRARY_PATH. >>What environment does ld look at during an exec call? The environment >>of the original process? Could we work around this with an execle or >>exect approach? > >telnetd assumes in several places that it modify/get master environment, >so it is possible, but require more work and will cause more differences >with standard telnetd development stream. Perhaps we should mention it to the author. Don't we also have a security problem in login since it is shared? I would expect any user logged into your system to be able to become any other user by using their own crypt library. Its not like our library sources aren't availible. :) >-- >Andrey A. Chernov : And I rest so composedly, /Now, in my bed, >ache@astral.msk.su : That any beholder /Might fancy me dead - >http://dt.demos.su/~ache : Might start at beholding me, /Thinking me dead. >RELCOM Team,FreeBSD Team : E.A.Poe From "For Annie" 1849 -- Justin T. Gibbs =========================================== Software Developer - Walnut Creek CDROM FreeBSD: Turning PCs into workstations ===========================================
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199510222126.OAA17661>