From 964fe051e9dc21be6c52ccf5b9ff47a8aea396fc Mon Sep 17 00:00:00 2001 From: Serge Hallyn Date: Thu, 20 Dec 2012 16:14:49 -0600 Subject: [PATCH] Clear environment for container MIME-Version: 1.0 Content-Type: text/plain; charset=utf8 Content-Transfer-Encoding: 8bit Clear env before starting a container. Do it right before setting the container=lxc variable. Signed-off-by: Serge Hallyn Acked-by: Stéphane Graber --- src/lxc/lxc_start.c | 4 ++++ src/lxc/lxccontainer.c | 5 +++++ 2 files changed, 9 insertions(+) diff --git a/src/lxc/lxc_start.c b/src/lxc/lxc_start.c index cedd908c0..fb756ddba 100644 --- a/src/lxc/lxc_start.c +++ b/src/lxc/lxc_start.c @@ -130,6 +130,10 @@ int main(int argc, char *argv[]) my_args.progname, my_args.quiet)) return err; + if (clearenv()) { + SYSERROR("failed to clear environment"); + /* don't error out though */ + } if (putenv("container=lxc")) { SYSERROR("failed to set environment variable"); return err; diff --git a/src/lxc/lxccontainer.c b/src/lxc/lxccontainer.c index fd77aac70..5919d2c57 100644 --- a/src/lxc/lxccontainer.c +++ b/src/lxc/lxccontainer.c @@ -364,6 +364,11 @@ static bool lxcapi_start(struct lxc_container *c, int useinit, char * const argv setsid(); } + if (clearenv()) { + SYSERROR("failed to clear environment"); + /* don't error out though */ + } + if (putenv("container=lxc")) { fprintf(stderr, "failed to set environment variable"); if (daemonize) { -- 2.47.2