[PATCH 2/2] Erase GLIBC_TUNABLES for setxid processes when tunables is disabled

Florian Weimer fweimer@redhat.com
Tue Jan 31 13:22:00 GMT 2017


On 01/29/2017 06:11 PM, Siddhesh Poyarekar wrote:
> In addition to this, I'll post a patch for earlier releases (2.24 and
> older) to add GLIBC_TUNABLES to unsecure_envvars (is unsecure even a
> word?) so that they too don't end up passing on unsafe tunables.

I expected a patch with a preprocessor condition for unsecvars.h for 
glibc 2.25.  Wouldn't this have the same effect than your tunables-based 
changes?

Thanks,
Florian



More information about the Libc-alpha mailing list