aboutsummaryrefslogtreecommitdiff
path: root/sysdeps
diff options
context:
space:
mode:
authorSiddhesh Poyarekar <siddhesh@sourceware.org>2023-09-19 13:25:40 -0400
committerSiddhesh Poyarekar <siddhesh@sourceware.org>2023-10-02 15:35:05 -0400
commit0d5f9ea97f1b39f2a855756078771673a68497e1 (patch)
treec9ef67485fda9dda07ffba2aa4f24f8b04c0145d /sysdeps
parent9e4e896f0f5a19a16c1a77567463b013a0f4952d (diff)
downloadglibc-0d5f9ea97f1b39f2a855756078771673a68497e1.tar
glibc-0d5f9ea97f1b39f2a855756078771673a68497e1.tar.gz
glibc-0d5f9ea97f1b39f2a855756078771673a68497e1.tar.bz2
glibc-0d5f9ea97f1b39f2a855756078771673a68497e1.zip
Propagate GLIBC_TUNABLES in setxid binaries
GLIBC_TUNABLES scrubbing happens earlier than envvar scrubbing and some tunables are required to propagate past setxid boundary, like their env_alias. Rely on tunable scrubbing to clean out GLIBC_TUNABLES like before, restoring behaviour in glibc 2.37 and earlier. Signed-off-by: Siddhesh Poyarekar <siddhesh@sourceware.org> Reviewed-by: Carlos O'Donell <carlos@redhat.com>
Diffstat (limited to 'sysdeps')
-rw-r--r--sysdeps/generic/unsecvars.h1
1 files changed, 0 insertions, 1 deletions
diff --git a/sysdeps/generic/unsecvars.h b/sysdeps/generic/unsecvars.h
index 81397fb90b..8278c50a84 100644
--- a/sysdeps/generic/unsecvars.h
+++ b/sysdeps/generic/unsecvars.h
@@ -4,7 +4,6 @@
#define UNSECURE_ENVVARS \
"GCONV_PATH\0" \
"GETCONF_DIR\0" \
- "GLIBC_TUNABLES\0" \
"HOSTALIASES\0" \
"LD_AUDIT\0" \
"LD_DEBUG\0" \