This is the mail archive of the libc-alpha@sourceware.org mailing list for the glibc project.

Index Nav:	[Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav:	[Date Prev] [Date Next]	[Thread Prev] [Thread Next]
Other format:	[Raw text]

Re: [PATCH 2/2] Erase GLIBC_TUNABLES for setxid processes when tunables is disabled

From: Siddhesh Poyarekar <siddhesh at sourceware dot org>
To: Florian Weimer <fweimer at redhat dot com>
Cc: libc-alpha at sourceware dot org
Date: Tue, 31 Jan 2017 21:12:11 +0530
Subject: Re: [PATCH 2/2] Erase GLIBC_TUNABLES for setxid processes when tunables is disabled
Authentication-results: sourceware.org; auth=none
References: <1485709870-25804-1-git-send-email-siddhesh@sourceware.org> <1485709870-25804-3-git-send-email-siddhesh@sourceware.org> <5fa1edf7-75f9-ac24-828d-d4900fa96146@redhat.com> <82837344-5c51-e400-3684-c508e65e4523@sourceware.org> <70eb30e1-d411-7780-9f02-7c8f33bfa467@redhat.com>
Reply-to: siddhesh at sourceware dot org

On Tuesday 31 January 2017 08:58 PM, Florian Weimer wrote:
> I'd suggest to keep the changes to a non-tunables configuration to a
> minimum, and unsecvars.h is better at that goal, I think.

Fair enough.  I have to step out now, so I'll post a modified version of
the 2.24 patch for the 2/2 tomorrow.  What do you think about 1/2?

Siddhesh

References:
- [PATCH 0/2] Environment variable security and tunables
  - From: Siddhesh Poyarekar
- [PATCH 2/2] Erase GLIBC_TUNABLES for setxid processes when tunables is disabled
  - From: Siddhesh Poyarekar
- Re: [PATCH 2/2] Erase GLIBC_TUNABLES for setxid processes when tunables is disabled
  - From: Florian Weimer
- Re: [PATCH 2/2] Erase GLIBC_TUNABLES for setxid processes when tunables is disabled
  - From: Siddhesh Poyarekar
- Re: [PATCH 2/2] Erase GLIBC_TUNABLES for setxid processes when tunables is disabled
  - From: Florian Weimer

Index Nav:	[Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav:	[Date Prev] [Date Next]	[Thread Prev] [Thread Next]