]> git.ipfire.org Git - thirdparty/glibc.git/commit
Drop GLIBC_TUNABLES in setxid processes
authorSiddhesh Poyarekar <siddhesh@sourceware.org>
Thu, 2 Feb 2017 10:45:45 +0000 (16:15 +0530)
committerSiddhesh Poyarekar <siddhesh@sourceware.org>
Thu, 2 Feb 2017 10:45:45 +0000 (16:15 +0530)
commit537a06fbdeb9a6c2184c745c15ef3346681f5eeb
treecef4cef218fc81ec5c9d79069ddae58a151b2efe
parent2762a7145bba9681b30ed5d4aed0c5d1df4329c8
Drop GLIBC_TUNABLES in setxid processes

Drop the GLIBC_TUNABLES environment variable from the environment of
setxid processes to avoid passing it on to non-setxid children.  This
prevents potentially insecure tunables in the GLIBC_TUNABLES envvar
from crossing over into a child that may use a libc that has tunables
support.

* sysdeps/generic/unsecvars.h: Add GLIBC_TUNABLES.
ChangeLog
sysdeps/generic/unsecvars.h