On Sun, Dec 20, 2015 at 5:09 AM, Hilbert Set <hilbert...@gmail.com> wrote:
> Hello,
> I am using the default httpd in CentOS 7.1, that is version 2.4.6-40.
>
> I need to set the LD_LIBRARY_PATH variable so that it is available to CGI
> scripts as native system environment variable.
> I do this by setting at the end of the file /etc/httpd/conf/httpd.conf:
>
> setenv LD_LIBRARY_PATH <path>
>
> I have always done this in previous versions and that has always worked
> fine.
> But is does not work in CentOS 7.1.
>
What previous versions? This entry from the CHANGES file might be relevant:
Changes with Apache 2.4.2
*) SECURITY: CVE-2012-0883 (cve.mitre.org)
envvars: Fix insecure handling of LD_LIBRARY_PATH that could lead to
the
current working directory to be searched for DSOs. [Stefan Fritsch]
--
Kurtis Rader
Caretaker of the exceptional canines Junior and Hank
