diff options
author | Mike Frysinger <vapier@gentoo.org> | 2013-02-23 00:28:42 -0500 |
---|---|---|
committer | Mike Frysinger <vapier@gentoo.org> | 2013-02-23 00:28:42 -0500 |
commit | 87f753cf677137f8d6c06c56ee6cc4db11ec71b0 (patch) | |
tree | 260225644f2c2ebfdba2125fb135f411aaea9358 /libsbutil | |
parent | libsandbox: clean up open file handles in parent tracing process (diff) | |
download | sandbox-87f753cf677137f8d6c06c56ee6cc4db11ec71b0.tar.gz sandbox-87f753cf677137f8d6c06c56ee6cc4db11ec71b0.tar.bz2 sandbox-87f753cf677137f8d6c06c56ee6cc4db11ec71b0.zip |
libsandbox: preserve more SANDBOX env vars
While we took pains to preserve the LD_PRELOAD setting, this doesn't
help us too much in practice. If a process is going out of its way
to blow away LD_PRELOAD, chances are good it's blowing away all vars
it doesn't know about. That means all of our SANDBOX_XXX settings.
Since a preloaded libsandbox.so is useless w/out its SANDBOX_XXX
env vars, make sure we preserve those as well.
These changes also imply some behavioral differences from older
versions. Previously, you could `unset` a sandbox var in order
to disable it. That no longer works. If you wish to disable
things, you have to explicitly set it to "".
Signed-off-by: Mike Frysinger <vapier@gentoo.org>
Diffstat (limited to 'libsbutil')
0 files changed, 0 insertions, 0 deletions