Drop GLIBC_TUNABLES in setxid processes

Drop the GLIBC_TUNABLES environment variable from the environment of
setxid processes to avoid passing it on to non-setxid children.  This
prevents potentially insecure tunables in the GLIBC_TUNABLES envvar
from crossing over into a child that may use a libc that has tunables
support.

	* sysdeps/generic/unsecvars.h: Add GLIBC_TUNABLES.

diff --git a/ChangeLog b/ChangeLog
index c06114015b6e97f3f3846b396a72ecc0cc0779cc..a2f7a915d3cf5c7fa75e14083a1f4345e276d543 100644 (file)
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,7 @@
+2017-04-06  Siddhesh Poyarekar  <siddhesh@sourceware.org>
+
+       * sysdeps/generic/unsecvars.h: Add GLIBC_TUNABLES.
+
 2017-04-06  Denis Kaganovich  <mahatma@eu.by>
            Magnus Granberg  <zorry@gentoo.org>
            Mike Frysinger  <vapier@gentoo.org>

diff --git a/sysdeps/generic/unsecvars.h b/sysdeps/generic/unsecvars.h
index d5b8119c9cb5cf5f1391325282287c5935c86589..3e56538b51c4acefff9aa9fb805ae22c641646f1 100644 (file)
--- a/sysdeps/generic/unsecvars.h
+++ b/sysdeps/generic/unsecvars.h
@@ -4,6 +4,7 @@
 #define UNSECURE_ENVVARS \
   "GCONV_PATH\0"                                                             \
   "GETCONF_DIR\0"                                                            \
+  "GLIBC_TUNABLES\0"                                                         \
   "HOSTALIASES\0"                                                            \
   "LD_AUDIT\0"                                                               \
   "LD_DEBUG\0"                                                               \