LDFLAGS of the Makefile
djm at mindrot.org
Wed Apr 12 09:23:45 EST 2000
On Tue, 11 Apr 2000, H.G.Borrmann wrote:
> The resultant makefile has the line:
> LDFLAGS=-L. -L/usr/local/lib -L/client/lib
> As a consequence a dot (the current directory) appears in the PATH of the Loader Section of ssh at the
> first place! That mean that a local user my replace the shared libraries libc.a, libnsl.a and libz.a by his own
> versions and manipulate the system as root, because ssh is installed suid root.
Openssh 1.2.3 has some configure trickery to prevent this particular
braindamage. It should set the -blibpath option to the linker
specifying an explicit library search path.
I would be interested to see why this isn't happening.
| "Bombay is 250ms from New York in the new world order" - Alan Cox
| Damien Miller - http://www.mindrot.org/
| Email: djm at mindrot.org (home) -or- djm at ibs.com.au (work)
More information about the openssh-unix-dev