From 74955460c5b9f23d7783395ce2478f5b7c5fd876 Mon Sep 17 00:00:00 2001 From: Ulrich Drepper Date: Tue, 26 Sep 2000 09:46:55 +0000 Subject: Update. 2000-09-26 Thorsten Kukuk * nscd/dbg_log.c (dbg_log): Add missing format string. * catgets/catgets.c (catopen): Use getenv instead of __secure_getenv since we filter out the variable once. * iconv/gconv_conf.c (__gconv_get_path): Likewise. * locale/newlocale.c (__newlocale): Likewise. * locale/setlocale.c (setlocale): Likewise. * malloc/malloc.c (ptmalloc_init): Likewise. * resolv/res_hconf.c (_res_hconf_init): Likewise. * resolv/res_init.c (__res_vinit): Likewise. * time/tzfile.c (__tzfile_read): Likewise. * sysdeps/generic/unsecvars.h: New file. * elf/dl-support.c (non_dynamic_init): Use it here to remove variables. * elf/rtld.c (process_envvars): Likewise. * elf/Makefile (distribute): Add unsecvars.h. --- sysdeps/generic/unsecvars.h | 11 +++++++++++ 1 file changed, 11 insertions(+) create mode 100644 sysdeps/generic/unsecvars.h (limited to 'sysdeps') diff --git a/sysdeps/generic/unsecvars.h b/sysdeps/generic/unsecvars.h new file mode 100644 index 0000000000..57b3368b6c --- /dev/null +++ b/sysdeps/generic/unsecvars.h @@ -0,0 +1,11 @@ +/* Environment variable to be removed for SUID programs. */ +#define UNSECURE_ENVVARS \ + "GCONV_PATH", \ + "LOCALDOMAIN", \ + "LOCPATH", \ + "MALLOC_TRACE", \ + "NLSPATH", \ + "RESOLV_HOST_CONF" \ + "RES_OPTIONS", \ + "TMPDIR", \ + "TZDIR" -- cgit 1.4.1