In Japanese gnome-game,Japanese menu can't be displayed.
The properity of the file looks strange: [bhuang@station3 bhuang]$ ls -al /usr/bin/mahjongg -r-xr-s--x 1 root games 45356 27n 28 05:33 /usr/bin/mahjongg [bhuang@station3 bhuang]$ su Password: [root@station3 bhuang]# chmod g-s /usr/bin/mahjongg [root@station3 bhuang]# ls -al /usr/bin/mahjongg -r-xr-x--x 1 root games 45356 27n 28 05:33 /usr/bin/mahjongg [root@station3 bhuang]# After chmod g-s ,Japanese menu can be displayed properly.
If sticky bit of the program is not disabled,after newgrp games, Japanese menu can also be displayed properly.
Temporary it seems we can solve this problem to add as the follow line to /etc/ld.so.conf: /usr/lib/gconv is this glibc's bug?
This problem occurred when GTK+ 1.2.9 didn't support setuid/setgid program. the application which uses the setgid must be execute via wrapper/helper.
I don't think this has anything to do with GTK+ or the GTK+-1.2.9 change (which doesn't trigger for gnome-score usage since the games have dropped their setgid privileges before they invoke GTK+) The attached simple iconv test works fine normally, fails with setgid games. Perhaps adding /usr/lib/gconv to /etc/ld.so.conf is the right solution ... presumably there is some security check to disable dlopen'ing gconv modules from non-system directories when running setuid/setgid.
Created attachment 24310 [details] Iconv test program for iconv-not-working-when setgid problem.
Glibc has several security checks which are in place during loading and dlopen from suid/sgid application. This particularly is because iconv dlopens a iconv module which needs another library (libJIS.so) and has DT_RPATH $ORIGIN. But $ORIGIN handling is disallowed for SUID/SGID programs. Ulrich, do you think dl-load.c could special case this (ie. __libc_enable_secure && DT_RPATH equal to "$ORIGIN" && l->l_origin is GCONV_PATH) or do you have other suggestions?
Always try the latest CVS version first. It all should work now.
*** Bug 48324 has been marked as a duplicate of this bug. ***
Oops, forgot to close. Should be fixed since glibc-2.2.3-15.
Red Hat Linux and Red Hat Powertools are currently no longer supported by Red Hat, Inc. In an effort to clean up bugzilla, we are closing all bugs in MODIFIED state for these products. However, we do want to make sure that nothing important slips through the cracks. If, in fact, these issues are not resolved in a current Fedora Core Release (such as Fedora Core 5), please open a new issues stating so. Thanks.