[PATCH 1/2] tunables: Fix environment variable processing for setuid binaries

[Siddhesh Poyarekar]

On Wednesday 01 February 2017 10:31 AM, Carlos O'Donell wrote:
> We really need a GLIBC_PRIVATE get/set API for regression testing all of
> these changes. Work for 2.26 I guess.

I have added a couple of test cases now that should at least do some
rudimentary verification of the routines that remove tunables form the
valstring and environment.  We may still need something that exercises
the tunable_list to see if the level 2 tunables are correctly ignored in
setuid binaries but still passed on to the child.  That or come to a
consensus on whether to mark them as level 3 variables and simply drop
them form the environment/valstring.

Siddhesh