76423 2005-01-02 09:04 0000 set[ug]id, dynamic linking and lazy bindings in sys-fs/fuse 2009-10-06 12:00:37 0000 1 1 1 Unclassified Gentoo Linux Applications unspecified All Linux CLOSED FIXED P2 minor --- 1 genneth@users.sourceforge.net genstef@gentoo.org genneth@users.sourceforge.net 2005-01-02 09:04:24 0000 The wonderful portage gives the following: QA Notice: /usr/bin/fusermount is setXid, dynamically linked and using lazy bindings. This combination is generally discouraged. Try: LDFLAGS='-Wl,-z,now' emerge fuse To be fair, it's pretty self-explanatory for anyone who is running an unstable ebuild and likes to watch the emerge process. On the otherhand, it is a pretty serious security hole, in something that is close to the kernel. Reproducible: Always Steps to Reproduce: 1. 2. 3. genstef@gentoo.org 2005-01-03 00:01:36 0000 Thank you for reporting, fixed in cvs. ssuominen@gentoo.org 2009-10-06 12:00:37 0000 +*fuse-2.7.4-r1 (06 Oct 2009) + + 06 Oct 2009; Samuli Suominen <ssuominen@gentoo.org> +fuse-2.7.4-r1.ebuild: + Drop fuse-fix-lazy-binding.patch wrt #226935, thanks to Rafał Mużyło + for reporting.