braries, to limit the effect of invalid
-L
flags given to
ld(1)
and
LD_PRELOAD
,
LD_LIBRARY_PATH
, given to
ld.so(8)
.
Link Mode
The link mode mediates access to hard links. When a link is created, the target file
must have the same access permissions as the link created (with the exception that
the destination does not need link access).
When choosing one of the Ux or Px file permission access modes, take into account
that the following environment variables are removed from the environment before the
child process inherits it. As a consequence, applications or processes relying on any of
these variables do not work anymore if the profile applied to them carries Ux or Px
flags:
•
GCONV_PATH
•
GETCONF_DIR
•
HOSTALIASES
•
LD_AUDIT
•
LD_DEBUG
•
LD_DEBUG_OUTPUT
•
LD_DYNAMIC_WEAK
•
LD_LIBRARY_PATH
•
LD_ORIGIN_PATH
•
LD_PRELOAD
•
LD_PROFILE
•
LD_SHOW_AUXV
•
LD_USE_LOAD_BIAS
•
LOCALDOMAIN
72
Novell AppArmor Administration Guide
