On: Using LD_PRELOAD to cheat, inject features and investigate programs

[Racing0461]

I think p is just trying to prevent people from being shot in the foot as opposed to preventing malicious users ie hackers.

[josephcsible → Racing0461]

You're not supposed to go to such lengths to stop people from shooting themselves in the foot, because when you do, you also stop people from doing clever things.

[Racing0461 → josephcsible]

I don't want my authentication library to do clever things.

[josephcsible → Racing0461]

Then you don't have to make yours do so. But if other sysadmins disagree, they should be able to make theirs do so.

[Racing0461 → josephcsible]

im talking from the point of view as the user of the software.

[josephcsible → Racing0461]

The same applies. If you don't want it to do clever stuff on your computer, then just configure it not to do so. Don't try to make the software less configurable so that I can't make it do clever stuff on my computer.