diff options
| author | Adhemerval Zanella <adhemerval.zanella@linaro.org> | 2023-11-22 17:43:23 -0300 |
|---|---|---|
| committer | Adhemerval Zanella <adhemerval.zanella@linaro.org> | 2023-12-05 13:21:36 -0300 |
| commit | 876a12e51323b4c0f7b6f32ec76f4a5280b7f0b9 (patch) | |
| tree | 27efea2aca442b69ada4a737d707999036e40514 /sysdeps | |
| parent | f85722f9cdedde15c263753cbee0a705d2be67af (diff) | |
| download | glibc-876a12e51323b4c0f7b6f32ec76f4a5280b7f0b9.tar.gz glibc-876a12e51323b4c0f7b6f32ec76f4a5280b7f0b9.tar.xz glibc-876a12e51323b4c0f7b6f32ec76f4a5280b7f0b9.zip | |
elf: Ignore loader debug env vars for setuid
Loader already ignores LD_DEBUG, LD_DEBUG_OUTPUT, and LD_TRACE_LOADED_OBJECTS. Both LD_WARN and LD_VERBOSE are similar to LD_DEBUG, in the sense they enable additional checks and debug information, so it makes sense to disable them. Also add both LD_VERBOSE and LD_WARN on filtered environment variables for setuid binaries. Checked on x86_64-linux-gnu. Reviewed-by: Siddhesh Poyarekar <siddhesh@sourceware.org>
Diffstat (limited to 'sysdeps')
| -rw-r--r-- | sysdeps/generic/unsecvars.h | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/sysdeps/generic/unsecvars.h b/sysdeps/generic/unsecvars.h index f7ebed60e5..8975df4a14 100644 --- a/sysdeps/generic/unsecvars.h +++ b/sysdeps/generic/unsecvars.h @@ -16,6 +16,8 @@ "LD_PRELOAD\0" \ "LD_PROFILE\0" \ "LD_SHOW_AUXV\0" \ + "LD_VERBOSE\0" \ + "LD_WARN\0" \ "LOCALDOMAIN\0" \ "LOCPATH\0" \ "MALLOC_ARENA_MAX\0" \ |