Bugtraq: Re: Another ld-linux.so problem

[carson () tla org (carson () tla org)]

> > > > > "Solar" == Solar Designer <solar () FALSE COM> writes:
Solar> Is there a reason for this limited LD_PRELOAD support for setuid binaries,
Solar> does something depend on it? It looks like this was done intentionally...

Yes. SOCKSifying stupid protocols that require binding ports <1024, for
example. Assuming you install libsocks5_sh.so in /usr/lib, you can do:

$ (export LD_PRELOAD=/usr/lib/libsocks5_sh.so; rsh machine.outside.firewall
pwd)

and have it work. This is basically what the runsocks script does.

--
Carson Gaspar -- carson () cs columbia edu carson () tla org carson () cugc org
http://www.cs.columbia.edu/~carson/home.html
Queen Trapped in a Butch Body