Re: [linux-security] Re: Buffer overflow in Linux's login program

[wietse porcupine org (Wietse Venema)]

> [Mod: Just remeber that while by itself suid but does not do much for login,
> it tells ld.so to ignore LD_ variables which can be used to supply a fake
> libc -- alex]

On many systems, ld.so will ignore LD_ variables only when effecive
uid != real uid. In other words,  ld.so does not care if the binary
is set-uid or not, it only looks at the rights of its process.

	Wietse