Bruce Sears wrote:
Charles Jardine wrote:

Most versions of Unix impose restrictions on run time linking to
prevent trojan horse attacks on privileged programs. The following
extract from the man page to ld.so.1(1) on Solaris describes one
version of this as follows:

    Secure processes  have  some  restrictions  applied  to  the
    evaluation  of  their  dependencies  and runpaths to prevent
    malicious dependency substitution or symbol interposition.

here are the results of queries in the CGI for the various uid, etc:

ORACLE_SID = xyz
$> = 48
$< = 48
$( = 48 48
$) = 48 48

This shows that my guess was completely wrong. This process is simply
running as apache. It is not 'secure' in the sense I mentioned. It should
not have any extra restrictions applied by the dynamic linker.

I have no other ideas as to why your canlt load libclntsh.so.
--
Charles Jardine - Computing Service, University of Cambridge
[EMAIL PROTECTED]    Tel: +44 1223 334506, Fax: +44 1223 334679

Reply via email to