oss-sec mailing list archives
Re: libdbus hardening
From: yersinia <yersinia.spiros () gmail com>
Date: Tue, 10 Jul 2012 15:57:53 +0200
As you already know popt include it from many years. Best regards Elia 2012/7/10, Solar Designer <solar () openwall com>:
On Tue, Jul 10, 2012 at 03:13:55PM +0200, Florian Weimer wrote:Perhaps we can put a getenv_secure() into libc, which will perform all the appropriate checks (including future checks we do not know about yet)? Duplicating the code in many libraries does not seem prudent.We already have __secure_getenv() in glibc, which I think is what libraries like this should be using on systems with glibc. Apparently, it was even in LSB until 1.3 inclusive, but was since dropped from there? Alexander
-- Inviato dal mio dispositivo mobile
Current thread:
- libdbus hardening Sebastian Krahmer (Jul 10)
- Re: libdbus hardening Florian Weimer (Jul 10)
- Re: libdbus hardening Solar Designer (Jul 10)
- Re: libdbus hardening Florian Weimer (Jul 10)
- Re: libdbus hardening Solar Designer (Jul 10)
- Re: libdbus hardening Sebastian Krahmer (Jul 10)
- Re: libdbus hardening Solar Designer (Jul 10)
- Re: libdbus hardening yersinia (Jul 10)
- Re: libdbus hardening Sebastian Krahmer (Jul 10)
- Re: libdbus hardening Solar Designer (Jul 10)
- Re: libdbus hardening Sebastian Krahmer (Jul 10)
- Re: libdbus hardening Solar Designer (Jul 10)
- Re: libdbus hardening Florian Weimer (Jul 11)
- Re: libdbus hardening Florian Weimer (Jul 10)
- Re: libdbus hardening Tomas Hoger (Sep 13)
- Re: libdbus hardening Sebastian Krahmer (Jul 11)
- Re: libdbus hardening Solar Designer (Jul 11)
- Re: libdbus hardening yersinia (Jul 11)