[Bug libc/17100] secure_getenv() does not seem to properly detect if an environment is secure

joseph at codesourcery dot com sourceware-bugzilla@sourceware.org
Sun Jun 29 11:55:00 GMT 2014


https://sourceware.org/bugzilla/show_bug.cgi?id=17100

--- Comment #2 from joseph at codesourcery dot com <joseph at codesourcery dot com> ---
On Sun, 29 Jun 2014, busterb at gmail dot com wrote:

> contexts, among other issues. I think that future glibc versions should only
> use AT_SECURE, removing the getuid/geteuid check. If AT_SECURE is unavailable,
> just assume the worst.

AT_SECURE is always available, since we removed support for pre-2.6 
kernels.

-- 
You are receiving this mail because:
You are on the CC list for the bug.



More information about the Glibc-bugs mailing list