projects / platform / upstream / glibc.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 9e4e896) | patch
Propagate GLIBC_TUNABLES in setxid binaries
authorSiddhesh Poyarekar <siddhesh@sourceware.org>
Tue, 19 Sep 2023 17:25:40 +0000 (13:25 -0400)
committerSiddhesh Poyarekar <siddhesh@sourceware.org>
Mon, 2 Oct 2023 19:35:05 +0000 (15:35 -0400)
commit0d5f9ea97f1b39f2a855756078771673a68497e1
treec9ef67485fda9dda07ffba2aa4f24f8b04c0145dtree | snapshot
parent9e4e896f0f5a19a16c1a77567463b013a0f4952dcommit | diff
Propagate GLIBC_TUNABLES in setxid binaries

GLIBC_TUNABLES scrubbing happens earlier than envvar scrubbing and some
tunables are required to propagate past setxid boundary, like their
env_alias.  Rely on tunable scrubbing to clean out GLIBC_TUNABLES like
before, restoring behaviour in glibc 2.37 and earlier.

Signed-off-by: Siddhesh Poyarekar <siddhesh@sourceware.org>
Reviewed-by: Carlos O'Donell <carlos@redhat.com>
sysdeps/generic/unsecvars.h diff | blob | history
Domain: System / Toolchain;