mirror of
https://sourceware.org/git/glibc.git
synced 2024-11-22 21:10:07 +00:00
876a12e513
Loader already ignores LD_DEBUG, LD_DEBUG_OUTPUT, and LD_TRACE_LOADED_OBJECTS. Both LD_WARN and LD_VERBOSE are similar to LD_DEBUG, in the sense they enable additional checks and debug information, so it makes sense to disable them. Also add both LD_VERBOSE and LD_WARN on filtered environment variables for setuid binaries. Checked on x86_64-linux-gnu. Reviewed-by: Siddhesh Poyarekar <siddhesh@sourceware.org>
37 lines
1.2 KiB
C
37 lines
1.2 KiB
C
/* Environment variable to be removed for SUID programs. The names are
|
|
all stuffed in a single string which means they have to be terminated
|
|
with a '\0' explicitly. */
|
|
#define UNSECURE_ENVVARS \
|
|
"GCONV_PATH\0" \
|
|
"GETCONF_DIR\0" \
|
|
"GLIBC_TUNABLES\0" \
|
|
"HOSTALIASES\0" \
|
|
"LD_AUDIT\0" \
|
|
"LD_DEBUG\0" \
|
|
"LD_DEBUG_OUTPUT\0" \
|
|
"LD_DYNAMIC_WEAK\0" \
|
|
"LD_HWCAP_MASK\0" \
|
|
"LD_LIBRARY_PATH\0" \
|
|
"LD_ORIGIN_PATH\0" \
|
|
"LD_PRELOAD\0" \
|
|
"LD_PROFILE\0" \
|
|
"LD_SHOW_AUXV\0" \
|
|
"LD_VERBOSE\0" \
|
|
"LD_WARN\0" \
|
|
"LOCALDOMAIN\0" \
|
|
"LOCPATH\0" \
|
|
"MALLOC_ARENA_MAX\0" \
|
|
"MALLOC_ARENA_TEST\0" \
|
|
"MALLOC_MMAP_MAX_\0" \
|
|
"MALLOC_MMAP_THRESHOLD_\0" \
|
|
"MALLOC_PERTURB_\0" \
|
|
"MALLOC_TOP_PAD_\0" \
|
|
"MALLOC_TRACE\0" \
|
|
"MALLOC_TRIM_THRESHOLD_\0" \
|
|
"NIS_PATH\0" \
|
|
"NLSPATH\0" \
|
|
"RESOLV_HOST_CONF\0" \
|
|
"RES_OPTIONS\0" \
|
|
"TMPDIR\0" \
|
|
"TZDIR\0"
|