Re: Security patch for gettext-0.11.5/ltmain.sh

[Bruno Haible]

Andrew V. Samoilov writes:

> libtool now creates worldwritable .libs, and it is not too wise as for me.

Without .libs being writable, the following fails (in packages which,
like gettext, build two shared libraries, one depending on the other):

   $ ./configure
   $ make
   $ su -p bin
   bin$ make install

thus
  1. it violates the GNU standards,
  2. it forces the user to install many packages as 'root', not 'bin',
     which leads to a much bigger security problem: that everyone who
     wants write access to /usr/local needs to know the root password.

That's the reason why I added this "chmod 777 .libs" to gettext's copy
of ltmain.sh.

Bruno