From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <thecrux@gmail.com>
X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on sa.int.altlinux.org
X-Spam-Level: 
X-Spam-Status: No, score=-1.6 required=5.0 tests=AWL,BAYES_00,
	DNS_FROM_OPENWHOIS,SPF_PASS autolearn=no version=3.2.5
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma;
	h=domainkey-signature:received:received:received:date:from:to:subject
	:message-id:mail-followup-to:references:mime-version:content-type
	:content-disposition:content-transfer-encoding:in-reply-to
	:user-agent; bh=ldVX3okie7+YKIESgpsOp8J97GgrrOevs4KHVuSdang=;
	b=iEaGOc94eTFveBiDyQV3yDur7c72GEqhVjtIcl2CQFP91WitDz1TDhhIuvonFM12Er
	PEjY5NMm7JnftUmYGi/kpfUqxT57b0E419rrl6i4PJaZmP7JhwsTYQaVeq5iJ2XubdK8
	4EZXuc+4XTJ31fC9LI/OHoi+hoAHBwWhb510o=
DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma;
	h=date:from:to:subject:message-id:mail-followup-to:references
	:mime-version:content-type:content-disposition
	:content-transfer-encoding:in-reply-to:user-agent;
	b=EMDLHwxfS+vqeHWJtUQQwz9lYEqRwi1KWRhLFCfAQNdBdl/9hJeao0iUE4bZGF/khS
	JGtWBcawRSgttoRfLKJOo3iNKyonKhEK8eC13f6k9J8yevn0+GGYTUFx3nJ6XynLL5QF
	XvdqSC/wSTTOE1vl1yksi7W0+9yNFBtGelUdY=
Date: Fri, 15 Oct 2010 22:32:54 +0400
From: Vladimir Lettiev <thecrux@gmail.com>
To: ALT Linux Team development discussions <devel@lists.altlinux.org>
Message-ID: <20101015183254.GA6393@truecrux.org>
Mail-Followup-To: ALT Linux Team development discussions
	<devel@lists.altlinux.org>
References: <20101015172519.GA5123@truecrux.org>
	<20101015182445.GA32553@dad.imath.kiev.ua>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
In-Reply-To: <20101015182445.GA32553@dad.imath.kiev.ua>
User-Agent: Mutt/1.5.20 (2009-06-14)
Subject: Re: [devel] Insecure library loading
X-BeenThere: devel@lists.altlinux.org
X-Mailman-Version: 2.1.12
Precedence: list
Reply-To: ALT Linux Team development discussions <devel@lists.altlinux.org>
List-Id: ALT Linux Team development discussions <devel.lists.altlinux.org>
List-Unsubscribe: <https://lists.altlinux.org/mailman/options/devel>,
	<mailto:devel-request@lists.altlinux.org?subject=unsubscribe>
List-Archive: <http://lists.altlinux.org/pipermail/devel>
List-Post: <mailto:devel@lists.altlinux.org>
List-Help: <mailto:devel-request@lists.altlinux.org?subject=help>
List-Subscribe: <https://lists.altlinux.org/mailman/listinfo/devel>,
	<mailto:devel-request@lists.altlinux.org?subject=subscribe>
X-List-Received-Date: Fri, 15 Oct 2010 18:34:15 -0000
Archived-At: <http://lore.altlinux.org/devel/20101015183254.GA6393@truecrux.org/>
List-Archive: <http://lore.altlinux.org/devel/>
List-Post: <mailto:devel@altlinux.org>

On Fri, Oct 15, 2010 at 09:24:45PM +0300, Igor Vlasenko wrote:
> On Fri, Oct 15, 2010 at 09:25:19PM +0400, Vladimir Lettiev wrote:
> > Судя по всему в debian провели аудит безопасности shell-скриптов на предмет
> > наличия небезопасного изменения переменной окружения LD_LIBRARY_PATH
> 
> Владимир, вы случайно готового скрипта для тестирования не встречали?
> Я думаю добавить и в repocop тест, готовый скрипт тестирования не помешал бы.

Пока нашёл только это:  http://bugs.debian.org/451559

-- 
Vladimir Lettiev aka crux ✉ theCrux@gmail.com