SuSE Bugzilla reports:

Marcus Meissner 2012-07-06 12:18:54 UTC

found by grep.

/etc/init.d/sfcb uses:

LDLIBRARYPATH=/usr/lib:$LDLIBRARYPATH

which is insecure if LDLIBRARYPATH is empty. It makes binaries use libraries from the current directory, which is a problem if e.g. a administrator starts the sfcb service from a untrusted directory.

Also it uses it to set /usr/lib, a default path.

Just get rid of the whole if ... as it is useless.

https://bugzilla.novell.com/showbug.cgi?id=770234