From: Sami Kerola <kerolasa@iki.fi>
Date: Mon, 29 May 2017 17:52:17 +0000 (+0100)
Subject: lib: remove _RLD_ from forbid environment variable list
X-Git-Tag: v2.31-rc1~297
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=143ea06851104ffaa9d3fe8de09c721d2364de64;p=thirdparty%2Futil-linux.git

lib: remove _RLD_ from forbid environment variable list

The RLD environment variables are related to runtime linker vulnerability in
TELNET on systems running Silicon Graphics IRIX.  It is extremely unlikely
current util-linux would be compiled on such system.

Reference: http://www.cert.org/historical/advisories/CA-1995-14.cfm
Reference: http://signatures.juniper.net/documentation/signatures/TELNET%3AEXPLOIT%3ASGI-RLD.html
Refefence: http://www.polarhome.com/service/man/?qf=rld&tf=2&of=IRIX&sf=1
Signed-off-by: Sami Kerola <kerolasa@iki.fi>
---

diff --git a/lib/env.c b/lib/env.c
index c79e0e0de0..b2e3d975a8 100644
--- a/lib/env.c
+++ b/lib/env.c
@@ -26,7 +26,6 @@ extern char **environ;
 #endif
 
 static char * const forbid[] = {
-        "_RLD_=",
         "BASH_ENV=",    /* GNU creeping featurism strikes again... */
         "ENV=",
         "HOME=",