@@ -1,7 +1,9 @@

 authbind (1.1.6) unstable; urgency=low

   * Do not Build-Depends: libc6-dev (it's build-essential).
-
+  * manpage: fix subtle error in description of interaction between
+    set-id and LD_PRELOAD.  Closes #36890.
+
  --

 authbind (1.1.5.3) unstable; urgency=low

diff --git a/authbind.1 b/authbind.1
index 8d6c335be462c92ec7343408bdfbace7532904b9..c551f773a89fcdc69b565c9121b7ec73f2488cad 100644 (file)
--- a/authbind.1
+++ b/authbind.1
@@ -205,7 +205,11 @@ means in this context).
 .B authbind
 is ineffective with setuid programs, because they do not honour
 .B LD_PRELOAD
-for security reasons.  Of course a setuid-root program does not need
+references outside the system directories, for security reasons.  (In
+fact, setuid programs should not honour
+.B LD_PRELOAD
+at all.)
+Of course a setuid-root program does not need
 .BR authbind ,
 but it might be useful to apply it to program which are setuid to
 another user or setgid.  If the author or builder of such a programs

diff --git a/debian/changelog b/debian/changelog
index cdae58592f5bbb2f2b53a15b0493ec065a8cd2a1..47a9571982ba6dd642995b570695a6223256ac9b 100644 (file)
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,7 +1,9 @@
 authbind (1.1.6) unstable; urgency=low
 
   * Do not Build-Depends: libc6-dev (it's build-essential).
-
+  * manpage: fix subtle error in description of interaction between
+    set-id and LD_PRELOAD.  Closes #36890.
+  
  --
 
 authbind (1.1.5.3) unstable; urgency=low