Re: QA needed for insecure LD_LIBRARY_PATH in many wrapper scripts

2007-11-16 Thread Mike Hommey
On Fri, Nov 16, 2007 at 10:01:34PM +0100, Stefan Fritsch wrote: > Hi, > > many wrapper scripts contain things like > > export LD_LIBRARY_PATH=foo:$LD_LIBRARY_PATH > > This is bad because if LD_LIBRARY_PATH is unset, it will expand to > > LD_LIBRARY_PATH=foo: > > which is interprete

QA needed for insecure LD_LIBRARY_PATH in many wrapper scripts

2007-11-16 Thread Stefan Fritsch
Hi, many wrapper scripts contain things like export LD_LIBRARY_PATH=foo:$LD_LIBRARY_PATH This is bad because if LD_LIBRARY_PATH is unset, it will expand to LD_LIBRARY_PATH=foo: which is interpreted as LD_LIBRARY_PATH=foo:. This means that the current directory