diff options
author | Christopher R. Palmer <crpalmer@gmail.com> | 2015-12-12 06:10:09 -0500 |
---|---|---|
committer | Gerrit Code Review <gerrit@cyanogenmod.org> | 2015-12-12 09:21:38 -0800 |
commit | 6d79500f5342edd505f0139db71527b1a0a72f1f (patch) | |
tree | b4153ef5172bc99fd9506560408092a9151a887c /libc | |
parent | d45ca0d9b66a91a3758a8907b9d0f1e4e4f66447 (diff) | |
download | bionic-6d79500f5342edd505f0139db71527b1a0a72f1f.zip bionic-6d79500f5342edd505f0139db71527b1a0a72f1f.tar.gz bionic-6d79500f5342edd505f0139db71527b1a0a72f1f.tar.bz2 |
bionic: Do not allow LD_SHIM_LIBS for setuid executables
That's really not safe...
Change-Id: If79af951830966fc21812cd0f60a8998a752a941
Diffstat (limited to 'libc')
-rw-r--r-- | libc/bionic/libc_init_common.cpp | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/libc/bionic/libc_init_common.cpp b/libc/bionic/libc_init_common.cpp index bd71628..ecde8d4 100644 --- a/libc/bionic/libc_init_common.cpp +++ b/libc/bionic/libc_init_common.cpp @@ -250,6 +250,7 @@ static bool __is_unsafe_environment_variable(const char* name) { "LD_ORIGIN_PATH", "LD_PRELOAD", "LD_PROFILE", + "LD_SHIM_LIBS", "LD_SHOW_AUXV", "LD_USE_LOAD_BIAS", "LOCALDOMAIN", |