[sudo-users] Keep LD_LIBRAY_PATH

Schernau, Ed Edward.Schernau at CITIZENSBANK.com
Wed Nov 1 13:11:55 EST 2006


I'll second that.  crle REPLACES the default paths, so be sure to add
whats already in there.

if you just specify your own path for it, you'll instantly hose the
machine.

Ed
Sorry about the attached signature, it's appended by Information
Security.  

-----Original Message-----
From: sudo-users-bounces at courtesan.com
[mailto:sudo-users-bounces at courtesan.com] On Behalf Of Russell Van
Tassell
Sent: Wednesday, November 01, 2006 12:39 PM
To: Brzozowski, Dwayne (AAC)
Cc: sudo-users at courtesan.com
Subject: Re: [sudo-users] Keep LD_LIBRAY_PATH


Just note, you can break a Solaris system *very* badly by even slight
mistakes with crle... when using it, be sure to include the system
library directories and do both the 32 and 64 bit paths (if applicable)
and be wary of the "trusted" paths.  And to be clear, this will set the
runtime linker path for everyone on the system, not just a given
application or user...  You might want to backup /var/ld/ld.config and
/var/ld/sparcv9/ld.config before you make any changes, as well.

The other option here, of course, is to allow sudo access to a script
that sets the path before calling the given binary (which is the option
we tend to us).

Hope that helps...
Russell


On Tue, Oct 31, 2006 at 08:52:14PM -0600, Brzozowski, Dwayne    (AAC)
wrote:
> Jan,
> you can use crle. I use is on my Solaris boxes. By typing crle, you
are
> given default library paths. To add additional library paths, just use
> (as root or sudo), 
> crle -u -l /usr/local/lib. If you want to add several library paths in
> one line, you can
> use this:
> 
> crle -u -l /usr/dt/lib -l /usr/openwin/lib
> 
> hope this helps.
> 
> -djb
> 
> Dwayne J. Brzozowski
> Department of Veterans Affairs
> Austin Automation Center
> Team Lead-Open Systems Support
> email:dwayne.brzozowski at mail.va.gov
> phone:512-326-6728
> 
> 
> -----Original Message-----
> From: sudo-users-bounces at courtesan.com
> [mailto:sudo-users-bounces at courtesan.com] On Behalf Of Jan Albrecht
> Sent: Tuesday, October 31, 2006 6:37 AM
> To: sudo-users at courtesan.com
> Subject: [sudo-users] Keep LD_LIBRAY_PATH
> 
> Hi all,
> 
> is there any known way to keep the LD_LIBRARY_PATH?
> I've tried it via env_keep but it doesn't work.
> 
> Thanks
> Jan
> ____________________________________________________________ 
> sudo-users mailing list <sudo-users at sudo.ws>
> For list information, options, or to unsubscribe, visit:
> http://www.sudo.ws/mailman/listinfo/sudo-users
> 
> ____________________________________________________________ 
> sudo-users mailing list <sudo-users at sudo.ws>
> For list information, options, or to unsubscribe, visit:
> http://www.sudo.ws/mailman/listinfo/sudo-users

-- 
Russell M. Van Tassell
russell at loosenut.com

The early bird may get the worm, but the second mouse gets the cheese.
____________________________________________________________ 
sudo-users mailing list <sudo-users at sudo.ws>
For list information, options, or to unsubscribe, visit:
http://www.sudo.ws/mailman/listinfo/sudo-users

-----------------------------------------
Use of email is inherently insecure. Confidential information,
including account information, and personally identifiable
information, should not be transmitted via email, or email
attachment.  In no event shall Citizens or any of its affiliates
accept any responsibility for the loss, use or misuse of any
information including confidential information, which is sent to
Citizens or its affiliates via email, or email attachment. Citizens
does not guarantee the accuracy of any email or email attachment,
that an email will be received by Citizens or that Citizens will
respond to any email.
 
This email message is confidential and/or privileged. It is to be
used by the intended recipient only.  Use of the information
contained in this email by anyone other than the intended recipient
is strictly prohibited. If you have received this message in error,
please notify the sender immediately and promptly destroy any
record of this email.





More information about the sudo-users mailing list