aboutsummaryrefslogtreecommitdiff
path: root/sysdeps/generic
diff options
context:
space:
mode:
authorAdhemerval Zanella <adhemerval.zanella@linaro.org>2023-11-22 17:43:24 -0300
committerAdhemerval Zanella <adhemerval.zanella@linaro.org>2023-12-05 13:21:36 -0300
commit61d848b554c8dd1f017b9d187b2a2f6675dbdbe4 (patch)
tree41de82ebf009ff82eb713b521d0a378d8ed2d11f /sysdeps/generic
parent876a12e51323b4c0f7b6f32ec76f4a5280b7f0b9 (diff)
downloadglibc-61d848b554c8dd1f017b9d187b2a2f6675dbdbe4.tar
glibc-61d848b554c8dd1f017b9d187b2a2f6675dbdbe4.tar.gz
glibc-61d848b554c8dd1f017b9d187b2a2f6675dbdbe4.tar.bz2
glibc-61d848b554c8dd1f017b9d187b2a2f6675dbdbe4.zip
elf: Ignore LD_BIND_NOW and LD_BIND_NOT for setuid binaries
To avoid any environment variable to change setuid binaries semantics. Checked on x86_64-linux-gnu. Reviewed-by: Siddhesh Poyarekar <siddhesh@sourceware.org>
Diffstat (limited to 'sysdeps/generic')
-rw-r--r--sysdeps/generic/unsecvars.h2
1 files changed, 2 insertions, 0 deletions
diff --git a/sysdeps/generic/unsecvars.h b/sysdeps/generic/unsecvars.h
index 8975df4a14..f1724efe0f 100644
--- a/sysdeps/generic/unsecvars.h
+++ b/sysdeps/generic/unsecvars.h
@@ -7,6 +7,8 @@
"GLIBC_TUNABLES\0" \
"HOSTALIASES\0" \
"LD_AUDIT\0" \
+ "LD_BIND_NOT\0" \
+ "LD_BIND_NOW\0" \
"LD_DEBUG\0" \
"LD_DEBUG_OUTPUT\0" \
"LD_DYNAMIC_WEAK\0" \