Matlab & LD_LIBRARY_PATH
David Scriven
davidwriter at yahoo.com
Thu Aug 3 23:38:58 UTC 2006
--- Matthew Saltzman <mjs at ces.clemson.edu> wrote:
> On Thu, 3 Aug 2006, Matthew Miller wrote:
>
> > On Wed, Aug 02, 2006 at 11:48:49PM -0400, David Scriven wrote:
> >> One can set LD_LIBRARY_PATH manually - ie. from the prompt
> >> and things work fine.
> >>
> >> My guess that somewhere it is being UNSET, but I can't figure
> >> out where. This happens on different machines running either
> >> FC4 or FC5.
> >
> > Something must be "sanitizing" it for security reasons.
> Interesting.
>
> https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=164869
>
> I recall running into this sometime around RH9. I thought I had
> filed a
> bug, but I can't find it now. I did find this, though:
>
> https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=118262
>
> And I wonder if the conclusion is relevant:
>
> Comment #3 From Jason Vas Dias:
> This bug is blocked by glibc bug 129682 - no setuid/setgid program
> can obtain LD_LIBRARY_PATH from the environment of a non-owner
> invoking user.
>
> at could be converted to not require setuid/setgid bits to be set
> -
> will work on this for next at version.
>
> Comment #4 From Jason Vas Dias:
> It seems the glibc developers consider this not a bug,
> but a security feature that is unlikely to be changed.
> So you'll just have to set LD_LIBRARY_PATH manually
> in your at jobs - it won't be recorded from your
> invoking environment if you are not root.
>
> For the reader's convenience:
>
> https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=129682
>
> The question is, when logging in via the display manager, does
> something
> setuid/setgid get run after .bash_profile? Then, is there some
> startup
> script that gets run after that program that could set the
> environment?
>
> In my experience, logging in not via the display manager results in
> LD_LIBRARY_PATH being set from .bash_profile as expected.
>
> --
> Matthew Saltzman
>
> Clemson University Math Sciences
> mjs AT clemson DOT edu
> http://www.math.clemson.edu/~mjs
>
> --
> fedora-list mailing list
> fedora-list at redhat.com
> To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
>
Hi Matthew,
There is a work-around - put it in /etc/bashrc and LD_LIBRARY_PATH
is set. Not optimal, but it works!
As far as setting it via /etc/profile - you are correct - booting
into a console (init 3) allows LD_LIBRARY_PATH to be set. Further
if you 'startx' LD_LIBRARY_PATH will still be set in whatever
display manager you are using.
However booting into X11 (init 5) prevents LD_LIBRARY_PATH from
being set.
The fact that you can legimately set it (init 3) would argue
against it being a security issue - it seems to be a mystery
that only people with greater knowledge than I can solve.
DS
__________________________________________________
Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection around
http://mail.yahoo.com
More information about the fedora-list
mailing list