>> Suggested TCR: If it is absolutely impossible to avoid setting >> LD_LIBRARY_PATH, LD_LIBRARY_PATH_32 & LD_LIBRARY_PATH_64 must >> be used to avoid breaking 32 vs. 64 bit applications. >> > >On Solaris we use LD_LIBRARY_PATH_64 (only 64 bit applications are >supported), but this env. variable doesn't seem to exist on Linux so we >use LD_LIBRARY_PATH.
I think it should be a TCR: you MUST build your applications such that $LD_LIBRARY_PATH does not be set. >They are all Bash scripts. Why not a POSIX shell (such as ksh93)? And if they are started from a command line, why are they end with .sh? >> What shell is used for these scripts? If it's /bin/sh, have you verified >> they >> work with both classic Solaris /bin/sh and ksh93 (which OpenSolaris uses as >> /bin/sh)? >> >>> We edit: >>> * /etc/dt/config/Xconfig to set Dtlogin*grabServer: False >> >> As much as it pains me to say it, given the security-reducing change you >> make: >> TCR: Perform equivalent modifications to gdm configuration as made to dtlogin >> configuration. (gdm is used on OpenSolaris as dtlogin is removed, and >> gdm may be used on Solaris 10 if accessibility is required or the site >> admin otherwise prefers it.) >> > >The changes are being made to gdm on OpenSolaris and Linux. Why is this change needed? >>> ./SUNWdmx/reloc/dmx/include/X11/* >>> ./SUNWdmx/reloc/dmx/lib/X11/* >> >> You appear to be shipping a large portion of the X Window System, including >> many libraries and headers which would already be present on the system, and >> which if included in the global LD_LIBRARY_PATH you set would break other >> applications. >> >> TCR: Stop that! >> > >Are you saying DMX is available on OpenSolaris -- we could not find it >the last time we looked. He's talking about the X11 bits which are in OpenSolaris. No ship which is also in OpenSolaris. Casper
