This is the mail archive of the libc-alpha@sourceware.org mailing list for the glibc project.

Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]
Other format: [Raw text]

Re: [Patch] Define secure_getenv

On 07/19/2012 03:50 PM, Florian Weimer wrote:
On 07/13/2012 06:07 PM, Carlos O'Donell wrote:

One last thing...

... it needs a testcase. 

I thought very hard about something which would not require root
privileges, and came up with the attached test.

But it will not work without installing libc first (and having root
privileges does not change that) because the LD_* environment variables
are ignored by SGID programs.

Never mind, statically linking the test works.

--
Florian Weimer / Red Hat Product Security Team


Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]