From: Christian Franke <Christian.Franke@t-online.de>
To: cygwin@cygwin.com
Subject: Re: Cannot exec() program outside of /bin if PATH is unset
Date: Wed, 08 Oct 2014 17:16:00 -0000 [thread overview]
Message-ID: <5435714D.6060206@t-online.de> (raw)
In-Reply-To: <20141008134106.GF29235@calimero.vinschen.de>
Corinna Vinschen wrote:
> On Sep 15 16:35, Christian Franke wrote:
>> ...
> I'm somewhat reluctant to add a call to SetDllDirectory to the Cygwin
> DLL for two reasons.
>
> - Calling SetDllDirectory with an explicit dir doesn't just add this dir
> to the search path, it also removes the CWD from the search path.
> While I agree that this is a good thing from a security POV, can we be
> sure that this behaviour isn't needed somewhere, by somebody?
>
> - The fact that SetDllDirectory affects searching linked DLLs in calls
> to CreateProcess is undocumented. Per the original MSDN pages,
> SetDllDirectory affects calls to LoadLibrary and LoadLibraryEx, but
> not linked DLLs when starting a child process. The latter is only
> mentioned in a Community Addition:
>
> http://msdn.microsoft.com/en-us/library/windows/desktop/ms686203%28v=vs.85%29.aspx
>
> Having said that, we can certainly test this, but I'm wondering
> if an upstream Cygwin patch might be ok. Something similar has been
> applied to the portable OpenSSH repository years ago, so there's
> precedent.
We could leave this open for now. I already added an easy workaround to
postfix
(add PATH=/usr/bin to import/export_environment default settings).
Christian
--
Problem reports: http://cygwin.com/problems.html
FAQ: http://cygwin.com/faq/
Documentation: http://cygwin.com/docs.html
Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple
next prev parent reply other threads:[~2014-10-08 17:16 UTC|newest]
Thread overview: 33+ messages / expand[flat|nested] mbox.gz Atom feed top
2014-09-12 18:02 Christian Franke
2014-09-12 19:39 ` Eric Blake
2014-09-12 21:14 ` Christian Franke
2014-09-12 21:56 ` Andrey Repin
2014-09-12 23:04 ` Christian Franke
2014-09-12 23:06 ` Eric Blake
2014-09-12 23:13 ` Eric Blake
2014-09-13 16:17 ` Christian Franke
2014-09-15 7:47 ` Peter Rosin
2014-09-15 9:28 ` Peter Rosin
2014-09-15 17:16 ` Christian Franke
2014-10-08 13:41 ` Corinna Vinschen
2014-10-08 17:16 ` Christian Franke [this message]
2014-10-09 10:03 ` Corinna Vinschen
2014-10-09 14:25 ` Eric Blake
2014-10-09 16:29 ` Corinna Vinschen
2014-10-09 16:34 ` tednolan
2014-10-10 10:34 ` Corinna Vinschen
2014-10-10 11:24 ` Jan Nijtmans
2014-10-10 11:32 ` Arjen Markus
2014-10-10 12:10 ` tednolan
2014-10-10 12:13 ` Arjen Markus
2014-10-10 15:39 ` Corinna Vinschen
2014-10-14 19:30 ` Corinna Vinschen
2014-10-16 21:51 ` Christian Franke
2014-10-17 9:10 ` Corinna Vinschen
2014-10-17 14:51 ` Corinna Vinschen
2014-10-17 17:56 ` Christian Franke
2014-10-17 18:20 ` Corinna Vinschen
2014-10-17 20:36 ` Csaba Raduly
2014-09-12 22:50 ` Eric Blake
2014-09-13 5:24 ` David Boyce
2014-09-14 9:40 ` Csaba Raduly
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=5435714D.6060206@t-online.de \
--to=christian.franke@t-online.de \
--cc=cygwin@cygwin.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).