AIX and zlib

Darren Tucker dtucker at zip.com.au
Wed Jul 7 07:27:54 EST 2004


Darren Tucker wrote:
> andy.tompkins at autozone.com wrote:
>> I then modified the Makefile so that blibpath has /usr/local/lib in it
>> before /usr/lib, and this works as expected.
>> Should configure be doing that for me on AIX?
> 
> Probably.  Please try the attached patch (you will need to run 
> "autoconf" to rebuild configure).

I've changed my mind, doing that is a very bad idea: "./configure 
--with-zlib=../zlib-1.1.4" or "./configure --with-zlib=/tmp/zlib-1.1.4" 
will result in binaries that are exploitable via a library injection 
attack (including ssh-keysign which is setuid root).

You can specify blibpath at configure time:
blibpath=/lib:/usr/lib:/usr/local/lib ./configure && make

-- 
Darren Tucker (dtucker at zip.com.au)
GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4  37C9 C982 80C7 8FF4 FA69
     Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.




More information about the openssh-unix-dev mailing list