Forces suexec to be compiled statically. This is necessary since it

is difficult and sometimes impossible to relocate executables that
are both setuid and dependent on dynamically loaded libraries.
(that is: setuid binaries ignore LD_* environment variables).

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@91736 13f79535-47bb-0310-9956-ffa450edef68

diff --git a/support/Makefile.in b/support/Makefile.in
index 242403a7b5a6cf19547220118b8a6729a393ed05..c6ea832d8725bc091f4d43108ead4b0f4b00b296 100644 (file)
--- a/support/Makefile.in
+++ b/support/Makefile.in
@@ -46,7 +46,9 @@ checkgid_OBJECTS = checkgid.lo
 checkgid: $(checkgid_OBJECTS)
        $(LINK) $(checkgid_LTFLAGS) $(checkgid_OBJECTS) $(PROGRAM_LDADD)
 
+# suexec must be statically compiled. Otherwise it is not relocatable,
+# since LD_* environment variables are ignored in setuid programs.
 suexec_OBJECTS = suexec.lo
 suexec: $(suexec_OBJECTS)
-       $(LINK) $(suexec_OBJECTS) $(PROGRAM_LDADD)
+       $(LINK) -static $(suexec_OBJECTS) $(PROGRAM_LDADD)