diff options
| author | Adhemerval Zanella <adhemerval.zanella@linaro.org> | 2023-11-22 17:43:24 -0300 |
|---|---|---|
| committer | Adhemerval Zanella <adhemerval.zanella@linaro.org> | 2023-12-05 13:21:36 -0300 |
| commit | 61d848b554c8dd1f017b9d187b2a2f6675dbdbe4 (patch) | |
| tree | 41de82ebf009ff82eb713b521d0a378d8ed2d11f /sysdeps/generic | |
| parent | 876a12e51323b4c0f7b6f32ec76f4a5280b7f0b9 (diff) | |
| download | glibc-61d848b554c8dd1f017b9d187b2a2f6675dbdbe4.tar.gz glibc-61d848b554c8dd1f017b9d187b2a2f6675dbdbe4.tar.xz glibc-61d848b554c8dd1f017b9d187b2a2f6675dbdbe4.zip | |
elf: Ignore LD_BIND_NOW and LD_BIND_NOT for setuid binaries
To avoid any environment variable to change setuid binaries semantics. Checked on x86_64-linux-gnu. Reviewed-by: Siddhesh Poyarekar <siddhesh@sourceware.org>
Diffstat (limited to 'sysdeps/generic')
| -rw-r--r-- | sysdeps/generic/unsecvars.h | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/sysdeps/generic/unsecvars.h b/sysdeps/generic/unsecvars.h index 8975df4a14..f1724efe0f 100644 --- a/sysdeps/generic/unsecvars.h +++ b/sysdeps/generic/unsecvars.h @@ -7,6 +7,8 @@ "GLIBC_TUNABLES\0" \ "HOSTALIASES\0" \ "LD_AUDIT\0" \ + "LD_BIND_NOT\0" \ + "LD_BIND_NOW\0" \ "LD_DEBUG\0" \ "LD_DEBUG_OUTPUT\0" \ "LD_DYNAMIC_WEAK\0" \ |