Search Path

Todd C. Miller Todd.Miller at courtesan.com
Fri Jan 9 11:42:08 EST 2004


Sudo clears out the LD_* variables before running a program since
they can be used to run arbitrary code and avoid sudo's restrictions.

In general, you are better off adding the library path to the dynamic
loader's list if your system supports it (most do these days).

However, if you really need LD_LIBRARY_PATH, with recent versions
of sudo you can put a line like this at the top of sudoers:

Defaults	env_delete-=LD_LIBRARY_PATH

 - todd


More information about the sudo-users mailing list