1 From 73e3fcd1a552783e66ff1f65c5f322e2f17a81d1 Mon Sep 17 00:00:00 2001
2 From: Siddhesh Poyarekar <siddhesh@sourceware.org>
3 Date: Tue, 19 Sep 2023 13:25:40 -0400
4 Subject: [PATCH 26/44] Propagate GLIBC_TUNABLES in setxid binaries
6 GLIBC_TUNABLES scrubbing happens earlier than envvar scrubbing and some
7 tunables are required to propagate past setxid boundary, like their
8 env_alias. Rely on tunable scrubbing to clean out GLIBC_TUNABLES like
9 before, restoring behaviour in glibc 2.37 and earlier.
11 Signed-off-by: Siddhesh Poyarekar <siddhesh@sourceware.org>
12 Reviewed-by: Carlos O'Donell <carlos@redhat.com>
13 (cherry picked from commit 0d5f9ea97f1b39f2a855756078771673a68497e1)
15 sysdeps/generic/unsecvars.h | 1 -
16 1 file changed, 1 deletion(-)
18 diff --git a/sysdeps/generic/unsecvars.h b/sysdeps/generic/unsecvars.h
19 index 81397fb90b..8278c50a84 100644
20 --- a/sysdeps/generic/unsecvars.h
21 +++ b/sysdeps/generic/unsecvars.h
23 #define UNSECURE_ENVVARS \
26 - "GLIBC_TUNABLES\0" \