My system is Novell SLES 11.4 x86-64.
I was presented with:
The ldd command must be disabled unless it protects against the execution of untrusted files.
If you google the above you can easily obtain more information about it.
oem setting of
root.root with permissions 0755.
It was also stated "An acceptable method of disabling 'ldd' is changing its mode to 0000"
If I do this and disable
ldd completely then my system does not work. The first ramification I immediately found was YAST doesn't work.
So the first compromise was to do
chmod 644 /usr/bin/ldd
while leaving the file owned by
root.root. This still causes problems and errors when running legitimate software (where a lot of money is spent on licensing).
So I have since concluded this request is either antiquated or just bad.
Looking for thoughts & suggestions, thanks.