|
From: | Bob Friesenhahn |
Subject: | Re: finish mode needed for plugins? |
Date: | Thu, 23 Oct 2008 08:12:08 -0500 (CDT) |
On Thu, 23 Oct 2008, Stefan Kost wrote:
No, I was thinking that there may be systems which require 'ldconfig' (or equivalent) in order to "bless" the file as being safe to load. I recall strange problems in the past but my memory has faded now as to which OSs were involved or what the exact scenario was.wounldn't it be more appropriate, if they customize the installed libtool to call appropriate commands, instead of overloading a command that happends to be called?
I don't understand what you are saying. By "systems" I mean operating systems. I am not talking about something specific to a site.
A common security exploit for applications is to induce them to load the wrong shared libraries or modules. This is why I am saying that there may be some OS's that want the system administrator to "bless" (i.e. register) such libraries or modules before they are allowed to be loaded.
Regardless, this is speculation at this point and not supported yet by any concrete evidence.
Bob ====================================== Bob Friesenhahn address@hidden, http://www.simplesystems.org/users/bfriesen/ GraphicsMagick Maintainer, http://www.GraphicsMagick.org/
[Prev in Thread] | Current Thread | [Next in Thread] |