Re: [gentoo-dev] LDFLAGS & KDE ebuild

[Spider]

begin  quote
On 23 Apr 2004 15:09:26 -0400
Ned Ludd <solar@g.o> wrote:

>
> KDE/QT really needs to be careful with linking. I've done a rather
> quick audit of ELF RPATH and KDE/QT is keeps RPATH's set to
> /var/tmp/portage*.
> This is very bad.. If say a user would do something as silly as
> symlink /var/tmp and /tmp then complete control of the system could be
> gained


actually its not overly silly thing to do (symlink or bind mount) as the
things in /var/tmp/portage arent really persistant between reboots (as
the data in /var should be) .  So from a users perspective it might even
be seen as a "good thing(tm)".

So yes, a check on the RPATH is good.  

//Spider

-- 
begin  .signature
Tortured users / Laughing in pain
See Microsoft KB Article Q265230 for more information.
end