Solaris/setuid root/LD_LIBRARY_PATH/ORACLE_HOME/lib*.so

Question

We are running Solaris 2.7 and have about 20 programs which use Embedded SQL. A few of these programs are setuid to root. We have LD_LIBRARY_PATH set to $ORACLE_HOME/lib.
This turns out to be a security problem for Solaris. i.e., it will only locate .so files needed for a setuid program if those objects are in /usr/lib.
Short of static linking, can someone tell me if there's a way to get around this problem? Also, if we link statically, is there a way of knowing if the particular revision of Oracle on the runtime machine is compatible with the machine that the machine that the code was linked on?
Please reply by email. I need this info ASAP.
Many TIA

Answer 1

This is must read thread, Am going through it.
read comments from Billy,
>
The LD_LIBRARY_PATH variable fits into this as the means to find and resolve the shared lib reference for loading of shared libraries. The load library call (whether called statically by the kernel when loading your executable, or called dynamically from within your loaded executable) needs to find the relevant shared lib on disk. And this environment variable determines where to look on disk for the physical library module to load.
Whether LD_LIBRARY_PATH is needed or not depends on how the dynamic link loader of the kernel works ito determing where to look for a shared lib.
The Windows dynamic link loader uses the PATH variable (after checking the current dir first). It seems from the test below that Linux needs the LD_LIBRARY_PATH set
>
source
What is LD_LIBRARY_PATH env variable for?