This is the mail archive of the
libc-alpha@sourceware.org
mailing list for the glibc project.
Re: [PATCH 2/6] tunables: Add LD_HWCAP_MASK to tunables
On 07/06/2017 02:33, Siddhesh Poyarekar wrote:
> On Tuesday 06 June 2017 11:27 PM, Adhemerval Zanella wrote:
>> LD_HWCAP_MASK is on UNSECURE_ENVVARS at sysdeps/generic/unsecvars.h, so I think
>> we should add a security_level: SXID_IGNORE for hwcap_mask as well.
>
> It is in UNSECURE_ENVVARS, so it should be SXID_ERASE (the default) and
> not SXID_IGNORE since the latter will make the tunable available for
> children of setuid processes.
Right, I wasn't aware SXID_ERASE was the default. Thanks for the clarification.