diff options
| author | Adhemerval Zanella <adhemerval.zanella@linaro.org> | 2023-11-22 17:43:23 -0300 |
|---|---|---|
| committer | Adhemerval Zanella <adhemerval.zanella@linaro.org> | 2023-12-05 13:21:36 -0300 |
| commit | 876a12e51323b4c0f7b6f32ec76f4a5280b7f0b9 (patch) | |
| tree | 27efea2aca442b69ada4a737d707999036e40514 /sysdeps/generic | |
| parent | f85722f9cdedde15c263753cbee0a705d2be67af (diff) | |
| download | glibc-876a12e51323b4c0f7b6f32ec76f4a5280b7f0b9.tar glibc-876a12e51323b4c0f7b6f32ec76f4a5280b7f0b9.tar.gz glibc-876a12e51323b4c0f7b6f32ec76f4a5280b7f0b9.tar.bz2 glibc-876a12e51323b4c0f7b6f32ec76f4a5280b7f0b9.zip | |
elf: Ignore loader debug env vars for setuid
Loader already ignores LD_DEBUG, LD_DEBUG_OUTPUT, and
LD_TRACE_LOADED_OBJECTS. Both LD_WARN and LD_VERBOSE are similar to
LD_DEBUG, in the sense they enable additional checks and debug
information, so it makes sense to disable them.
Also add both LD_VERBOSE and LD_WARN on filtered environment variables
for setuid binaries.
Checked on x86_64-linux-gnu.
Reviewed-by: Siddhesh Poyarekar <siddhesh@sourceware.org>
Diffstat (limited to 'sysdeps/generic')
| -rw-r--r-- | sysdeps/generic/unsecvars.h | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/sysdeps/generic/unsecvars.h b/sysdeps/generic/unsecvars.h index f7ebed60e5..8975df4a14 100644 --- a/sysdeps/generic/unsecvars.h +++ b/sysdeps/generic/unsecvars.h @@ -16,6 +16,8 @@ "LD_PRELOAD\0" \ "LD_PROFILE\0" \ "LD_SHOW_AUXV\0" \ + "LD_VERBOSE\0" \ + "LD_WARN\0" \ "LOCALDOMAIN\0" \ "LOCPATH\0" \ "MALLOC_ARENA_MAX\0" \ |