[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: finish mode needed for plugins?

From: Bob Friesenhahn
Subject: Re: finish mode needed for plugins?
Date: Thu, 23 Oct 2008 08:12:08 -0500 (CDT)

On Thu, 23 Oct 2008, Stefan Kost wrote:
No, I was thinking that there may be systems which require 'ldconfig'
(or equivalent) in order to "bless" the file as being safe to load.
I recall strange problems in the past but my memory has faded now as
to which OSs were involved or what the exact scenario was.
wounldn't it be more appropriate, if they customize the installed
libtool to call appropriate commands, instead of overloading a command
that happends to be called?

I don't understand what you are saying. By "systems" I mean operating systems. I am not talking about something specific to a site.

A common security exploit for applications is to induce them to load the wrong shared libraries or modules. This is why I am saying that there may be some OS's that want the system administrator to "bless" (i.e. register) such libraries or modules before they are allowed to be loaded.

Regardless, this is speculation at this point and not supported yet by any concrete evidence.

Bob Friesenhahn
address@hidden, http://www.simplesystems.org/users/bfriesen/
GraphicsMagick Maintainer,    http://www.GraphicsMagick.org/

reply via email to

[Prev in Thread] Current Thread [Next in Thread]