[Patch] Define secure_getenv
Florian Weimer
fweimer@redhat.com
Thu Jul 19 13:51:00 GMT 2012
On 07/13/2012 06:07 PM, Carlos O'Donell wrote:
> One last thing...
>
> ... it needs a testcase.
I thought very hard about something which would not require root
privileges, and came up with the attached test.
But it will not work without installing libc first (and having root
privileges does not change that) because the LD_* environment variables
are ignored by SGID programs.
I can test the non-AT_SECURE case if you think it is worth it.
--
Florian Weimer / Red Hat Product Security Team
-------------- next part --------------
A non-text attachment was scrubbed...
Name: tst-secure-getenv.c
Type: text/x-csrc
Size: 5081 bytes
Desc: not available
URL: <http://sourceware.org/pipermail/libc-alpha/attachments/20120719/86bbddd4/attachment.bin>
More information about the Libc-alpha
mailing list