On Sun, Apr 10, 2005 at 12:06:34PM +0200, Mario Holbe wrote:
> Package: e2fsprogs
> Version: 1.37-1
>
> while looking at your /usr/share/initrd-tools/scripts/e2fsprogs,
> I found you are sorting out linux-gate.so from the libs to copy to
> the initrd image.
> Could you please do the same for libsafe.so (a library preloaded
> to protect against buffer overflow vulnerabilities).
I've made a more general change to the script (it unsets LD_PRELOAD
and LD_LIBRARY_PATH and checks everything in /etc/ld.so.preload and
filters them out), but it's not going to help by itself, since
mkinitrd does a similar ldd other executables, and it isn't currently
doing this filtering. So if libsafe.so is in /etc/ld.so.preload, it
will still end up in the initrd image, because of the core mkinitrd
script. It's not terribly big (19k) so it may not be worth worrying
about.
I'll still commit the change so that if and when mkinitrd gets fixed,
the right thing will happen.
- Ted
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
