[LFS Trac] #1721: Perl ./Configure can leak information from chroot environment

LFS Trac trac at linuxfromscratch.org
Sat Feb 25 04:17:22 PST 2006


#1721: Perl ./Configure can leak information from chroot environment
-------------------------------------+--------------------------------------
 Reporter:  martyman99999 at yahoo.com  |       Owner:  lfs-book at linuxfromscratch.org
     Type:  defect                   |      Status:  new                          
 Priority:  normal                   |   Milestone:                               
Component:  Book                     |     Version:  SVN                          
 Severity:  normal                   |    Keywords:                               
-------------------------------------+--------------------------------------
 I started to run ./Configure during the chroot build of Perl to
 experiment.  One of the very first steps displayed the uname -r of the
 host system, so this represents an opportunity for pollution of the LFS
 system.  I did not experiment further to see if there were other
 information leaks.

 At the very least I recommend some research and a note in the book to be
 cautious.  It might be best to recommend reinstalling Perl after booting
 into the LFS, if one wants to ./Configure.

 - Marty Jack

-- 
Ticket URL: <http://wiki.linuxfromscratch.org/lfs/ticket/1721>
LFS Trac <http://wiki.linuxfromscratch.org/lfs/>
Linux From Scratch: Your Distro, Your Rules.



More information about the lfs-book mailing list