Vulnerability Development mailing list archives
Re: expect to get hacked
From: Olaf Kirch <okir () caldera de>
Date: Mon, 11 Jun 2001 17:32:42 +0200
On Tue, Jun 12, 2001 at 12:04:33AM +1200, zen-parse () gmx net wrote:
Under Redhat 7.0 expect uses the wrong path for search for its libs, one of the paths including a /var/tmp/ component.
I assume this is another instance of a problem I've seen repeatedly with
RPMs built using the BuildRoot mechanism (i.e. where data is installed
into /some/fake/rootdir, packaged, and the fake tree thrown away again).
I've seen several RPMs where people were too lazy to patch the Makefiles
to make them install to the buildroot directory, and used stuff like
"make prefix=/tmp/foobar-1.2.3/usr install".
This can have bad side effects, like compiling /tmp/foobar-1.2.3/usr/blabla
into your search paths.
Don't do that, folks :)
Olaf
--
Olaf Kirch | --- o --- Nous sommes du soleil we love when we play
okir () monad swb de | / | \ sol.dhoop.naytheet.ah kin.ir.samse.qurax
okir () caldera de +-------------------- Why Not?! -----------------------
UNIX, n.: Spanish manufacturer of fire extinguishers.
Current thread:
- expect to get hacked zen-parse (Jun 11)
- Re: expect to get hacked Olaf Kirch (Jun 11)
