]> git.ipfire.org Git - thirdparty/glibc.git/blob - elf/dl-tunables.list
tunables: Fix environment variable processing for setuid binaries (bz #21073)
[thirdparty/glibc.git] / elf / dl-tunables.list
1 # Copyright (C) 2016-2017 Free Software Foundation, Inc.
2 # This file is part of the GNU C Library.
3
4 # The GNU C Library is free software; you can redistribute it and/or
5 # modify it under the terms of the GNU Lesser General Public
6 # License as published by the Free Software Foundation; either
7 # version 2.1 of the License, or (at your option) any later version.
8
9 # The GNU C Library is distributed in the hope that it will be useful,
10 # but WITHOUT ANY WARRANTY; without even the implied warranty of
11 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
12 # Lesser General Public License for more details.
13
14 # You should have received a copy of the GNU Lesser General Public
15 # License along with the GNU C Library; if not, see
16 # <http://www.gnu.org/licenses/>.
17
18 # Allowed attributes for tunables:
19 #
20 # type: Defaults to STRING
21 # minval: Optional minimum acceptable value
22 # maxval: Optional maximum acceptable value
23 # env_alias: An alias environment variable
24 # security_level: Specify security level of the tunable. Valid values are:
25 #
26 # SXID_ERASE: (default) Don't read for AT_SECURE binaries and
27 # removed so that child processes can't read it.
28 # SXID_IGNORE: Don't read for AT_SECURE binaries, but retained for
29 # non-AT_SECURE subprocesses.
30 # SXID_NONE: Read all the time.
31
32 glibc {
33 malloc {
34 check {
35 type: INT_32
36 minval: 0
37 maxval: 3
38 env_alias: MALLOC_CHECK_
39 }
40 top_pad {
41 type: SIZE_T
42 env_alias: MALLOC_TOP_PAD_
43 security_level: SXID_IGNORE
44 }
45 perturb {
46 type: INT_32
47 minval: 0
48 maxval: 0xff
49 env_alias: MALLOC_PERTURB_
50 security_level: SXID_IGNORE
51 }
52 mmap_threshold {
53 type: SIZE_T
54 env_alias: MALLOC_MMAP_THRESHOLD_
55 security_level: SXID_IGNORE
56 }
57 trim_threshold {
58 type: SIZE_T
59 env_alias: MALLOC_TRIM_THRESHOLD_
60 security_level: SXID_IGNORE
61 }
62 mmap_max {
63 type: INT_32
64 env_alias: MALLOC_MMAP_MAX_
65 security_level: SXID_IGNORE
66 }
67 arena_max {
68 type: SIZE_T
69 env_alias: MALLOC_ARENA_MAX
70 minval: 1
71 security_level: SXID_IGNORE
72 }
73 arena_test {
74 type: SIZE_T
75 env_alias: MALLOC_ARENA_TEST
76 minval: 1
77 security_level: SXID_IGNORE
78 }
79 }
80 }