Hello, Why does the configure scipt include -I/usr/local/include for CPPFLAGS and -L/usr/local/lib -R/usr/local/lib for LDFLAGS in the Makefile? Is this nesscesary? I take them out for security concerns Thanks Doug
I think it's silly. I take that out locally. If there's multiple versions of, say, OpenSSL or, say, MIT or Heimdal krb5, or what have you, then not being in full control over the include and linker paths can lead to unexpected results. Nico On Thu, Jan 24, 2002 at 12:03:06PM -0500, Chimento, Douglas wrote:> Hello, > > Why does the configure scipt include -I/usr/local/include for > CPPFLAGS > and -L/usr/local/lib -R/usr/local/lib for LDFLAGS in the Makefile? > Is this nesscesary? I take them out for security concerns > > Thanks > Doug > _______________________________________________ > openssh-unix-dev at mindrot.org mailing list > http://www.mindrot.org/mailman/listinfo/openssh-unix-dev-- -DISCLAIMER: an automatically appended disclaimer may follow. By posting- -to a public e-mail mailing list I hereby grant permission to distribute- -and copy this message.- Visit our website at http://www.ubswarburg.com This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. E-mail transmission cannot be guaranteed to be secure or error-free as information could be intercepted, corrupted, lost, destroyed, arrive late or incomplete, or contain viruses. The sender therefore does not accept liability for any errors or omissions in the contents of this message which arise as a result of e-mail transmission. If verification is required please request a hard-copy version. This message is provided for informational purposes and should not be construed as a solicitation or offer to buy or sell any securities or related financial instruments.
On Thu, Jan 24, 2002 at 12:03:06PM -0500, Chimento, Douglas wrote:> Hello, > > Why does the configure scipt include -I/usr/local/include for > CPPFLAGS and -L/usr/local/lib -R/usr/local/lib for LDFLAGS in > the Makefile? Is this nesscesary? I take them out for security > concernsbingo. i take this out manually as well, since even if i have nothing in /usr/local that has to do with OpenSSH, it is generated this way by configure. i have simply suspected that It Is A Configure Thing(tm), and wished that there was a --no-usrlocalrefs flag or some such thing.. is it possible to have a --no-usrlocalrefs flag? hmm....... chris -- Christopher Linn, <celinn at mtu.edu> | By no means shall either the CEC Staff System Administrator | or MTU be held in any way liable Center for Experimental Computation | for any opinions or conjecture I Michigan Technological University | hold to or imply to hold herein.
Thank you for you help, I will file a bug report -----Original Message----- From: Nicolas Williams [mailto:Nicolas.Williams at ubsw.com] Sent: Thursday, January 24, 2002 1:59 PM To: Christopher Linn Cc: openssh-unix-dev at mindrot.org Subject: Re: Configure script On Thu, Jan 24, 2002 at 01:43:19PM -0500, Christopher Linn wrote:> On Thu, Jan 24, 2002 at 12:03:06PM -0500, Chimento, Douglas wrote: > > Hello, > > > > Why does the configure scipt include -I/usr/local/include for > > CPPFLAGS and -L/usr/local/lib -R/usr/local/lib for LDFLAGS in > > the Makefile? Is this nesscesary? I take them out for security > > concerns > > bingo. > > i take this out manually as well, since even if i have nothing in > /usr/local that has to do with OpenSSH, it is generated this way by > configure. i have simply suspected that It Is A Configure Thing(tm), > and wished that there was a --no-usrlocalrefs flag or some such thing.. > > is it possible to have a --no-usrlocalrefs flag? hmm.......Just edit configure.ac, autoreconf, and you're set. It just shouldn't be there, really. File a bug report in bugzilla.> chrisNico -- -DISCLAIMER: an automatically appended disclaimer may follow. By posting- -to a public e-mail mailing list I hereby grant permission to distribute- -and copy this message.- Visit our website at http://www.ubswarburg.com This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. E-mail transmission cannot be guaranteed to be secure or error-free as information could be intercepted, corrupted, lost, destroyed, arrive late or incomplete, or contain viruses. The sender therefore does not accept liability for any errors or omissions in the contents of this message which arise as a result of e-mail transmission. If verification is required please request a hard-copy version. This message is provided for informational purposes and should not be construed as a solicitation or offer to buy or sell any securities or related financial instruments. _______________________________________________ openssh-unix-dev at mindrot.org mailing list http://www.mindrot.org/mailman/listinfo/openssh-unix-dev