> From [EMAIL PROTECTED] Wed Oct 11 21:44:09 2000
> Date: Thu, 12 Oct 2000 01:44:19 +0200 (CEST)
> From: Niklas Edmundsson <[EMAIL PROTECTED]>
> To: [EMAIL PROTECTED]
> Subject: Re: LPRng: LPRng-3.6.25 - security patch added
>
> On Wed, 11 Oct 2000 [EMAIL PROTECTED] wrote:
>
> > gettext Compromise -
> > added the following to Initialize():
> > if( getuid() == 0 || geteuid() == 0 ) unsetenv("NLSPATH");
> > IN6_ADDR removed, in fact IPV6 stuff removed.
>
> AIX:
> ld: 0711-317 ERROR: Undefined symbol: .unsetenv
>
> Solaris:
> Undefined first referenced
> symbol in file
> unsetenv liblpr.a(initialize.o)
> ld: fatal: Symbol referencing errors. No output written to lpc
>
> And probably the same effect on IRIX.
>
> I'd guess that you only test built it on a Linux-box, since unsetenv
> seems to be some BSD4.3 thing lying around...
>
> Will putenv("NLSPATH=") do the wrong thing ? Or do you really have to
> get rid of NLSPATH from the environment ?
>
>
> /Nikke - holds up the "doesn't build" flag...
> --
> -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
> Niklas Edmundsson, Admin @ {acc,hpc2n,ing}.umu.se | [EMAIL PROTECTED]
> ---------------------------------------------------------------------------
> Do your knees buckle, but not your belt?.
> =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
Thank you, you are now the proud holder of the very rare
"One bug and a new release"
award.
Sigh...
Patrick ("&*())(*& security stuff") Powell
-----------------------------------------------------------------------------
If you need help, send email to [EMAIL PROTECTED] (or lprng-requests
or lprng-digest-requests) with the word 'help' in the body. For the impatient,
to subscribe to a list with name LIST, send mail to [EMAIL PROTECTED]
with: | example:
subscribe LIST <mailaddr> | subscribe lprng-digest [EMAIL PROTECTED]
unsubscribe LIST <mailaddr> | unsubscribe lprng [EMAIL PROTECTED]
If you have major problems, send email to [EMAIL PROTECTED] with the word
LPRNGLIST in the SUBJECT line.
-----------------------------------------------------------------------------
