]> git.ipfire.org Git - thirdparty/glibc.git/commit
Drop GLIBC_TUNABLES in setxid processes
authorSiddhesh Poyarekar <siddhesh@sourceware.org>
Thu, 2 Feb 2017 10:45:45 +0000 (16:15 +0530)
committerSiddhesh Poyarekar <siddhesh@sourceware.org>
Thu, 2 Feb 2017 10:48:15 +0000 (16:18 +0530)
commit800f9aa06b64427336eb1f11469d854bf5889122
treea07139ad8ae0b32406889cf13e6d27198b4ae545
parentda9f68f2b9f653a49d0d0c6148d4649dc9ad7fd6
Drop GLIBC_TUNABLES in setxid processes

Drop the GLIBC_TUNABLES environment variable from the environment of
setxid processes to avoid passing it on to non-setxid children.  This
prevents potentially insecure tunables in the GLIBC_TUNABLES envvar
from crossing over into a child that may use a libc that has tunables
support.

* sysdeps/generic/unsecvars.h: Add GLIBC_TUNABLES.
ChangeLog
sysdeps/generic/unsecvars.h