[Patch] Define secure_getenv

[Florian Weimer]

On 07/19/2012 03:50 PM, Florian Weimer wrote:
> On 07/13/2012 06:07 PM, Carlos O'Donell wrote:
>
>> One last thing...
>>
>> ... it needs a testcase.
>
> I thought very hard about something which would not require root
> privileges, and came up with the attached test.
>
> But it will not work without installing libc first (and having root
> privileges does not change that) because the LD_* environment variables
> are ignored by SGID programs.

Never mind, statically linking the test works.

-- 
Florian Weimer / Red Hat Product Security Team