Re: libdbus hardening

[Solar Designer <solar () openwall com>]

On Tue, Jul 10, 2012 at 03:13:55PM +0200, Florian Weimer wrote:
> Perhaps we can put a getenv_secure() into libc, which will perform all 
> the appropriate checks (including future checks we do not know about 
> yet)?  Duplicating the code in many libraries does not seem prudent.

We already have __secure_getenv() in glibc, which I think is what
libraries like this should be using on systems with glibc.

Apparently, it was even in LSB until 1.3 inclusive, but was since
dropped from there?

Alexander