Re: libdbus hardening

[Florian Weimer <fweimer () redhat com>]

On 07/10/2012 04:30 PM, Sebastian Krahmer wrote:

> > If this is not for upstream and you only need it working on a particular
> > distro with glibc, then why not use __secure_getenv()?
>
> Indeed, if it is a exported symbol on the glibc versions we ship,
> we should consider this. I remember a discussion that it was somehow
> not available in the past.

__secure_getenv() is declared and documented in <stdlib.h>, so it's not 
likely to go away, especially if we start using it more widely.

--
Florian Weimer / Red Hat Product Security Team