LinuxQuestions.org
Latest LQ Deal: Latest LQ Deals
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Slackware
User Name
Password
Slackware This Forum is for the discussion of Slackware Linux.

Notices


Reply
  Search this Thread
Old 03-25-2013, 08:56 PM   #1
mreff555
Member
 
Registered: Sep 2011
Location: Philly
Distribution: Gentoo
Posts: 473

Rep: Reputation: Disabled
Is this as interesting as it soulds


I found this line in the gcc build script. I'm curious about the reason behind it. Can anyone give me an explanation?

Code:
# Temporary build location.  This should *NOT* be a directory
# path a non-root user could create later...
TMP=${TMP:-"/gcc-$(mcookie)"}
 
Old 03-25-2013, 09:19 PM   #2
volkerdi
Slackware Maintainer
 
Registered: Dec 2002
Location: Minnesota
Distribution: Slackware! :-)
Posts: 2,504

Rep: Reputation: 8461Reputation: 8461Reputation: 8461Reputation: 8461Reputation: 8461Reputation: 8461Reputation: 8461Reputation: 8461Reputation: 8461Reputation: 8461Reputation: 8461
Quote:
Originally Posted by mreff555 View Post
I found this line in the gcc build script. I'm curious about the reason behind it. Can anyone give me an explanation?

Code:
# Temporary build location.  This should *NOT* be a directory
# path a non-root user could create later...
TMP=${TMP:-"/gcc-$(mcookie)"}
That was added a long time ago after I read a report about /tmp paths being embedded in libraries, and an audit of the system showed that glibc, gcc, and bind libraries all had strings in them from the build location. My concern was that someone might be able to create a replacement library in the original build location and use it to do evil things, and I seem to recall a report similar to that (maybe for something else), also long ago. I don't know if the danger was real, but the change was made anyway.

Now I'm finding no reference to this through Google, and don't remember where I heard about it. Maybe the old vendor-sec list? It would be interesting to know if something like that was ever possible, certainly.
 
Old 03-25-2013, 09:41 PM   #3
mreff555
Member
 
Registered: Sep 2011
Location: Philly
Distribution: Gentoo
Posts: 473

Original Poster
Rep: Reputation: Disabled
Yes it would. I was suspecting something to that order but had never heard of anything like that. Thanks for clearing that up.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
an interesting ad I saw newbiesforever General 22 03-12-2010 04:24 AM
LXer: Interesting new Ubuntu-derived, OS X-inspired distro, interesting revenue (yes, LXer Syndicated Linux News 0 05-01-2009 08:51 AM
very interesting... kessler961 General 9 04-27-2008 04:15 AM
This is interesting...... radix Slackware 4 09-05-2003 08:58 PM
I think it maybe interesting :) nautilus_1987 General 7 09-29-2002 12:21 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Slackware

All times are GMT -5. The time now is 01:14 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration