OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: Here's another glibc env. var.
From: Chris Evans (chrisferret.lmh.ox.ac.uk)
Date: Fri May 26 2000 - 18:04:32 CDT

On Fri, 26 May 2000, Alan Cox wrote:

> > Let me explain an idea I had recently: whenever execve() is called on a
> > s[ug]id binary, the kernel would load and run a specified "wrapper"
>
> Keep the kernel out of it. If you want to do this add yourself an
> ld-sanitize.so and make that your elf loader for such apps. No kernel help
> needed

I think we need a telnetd approach. Upon exec() of privileged program, we
nuke the entire environment apart from a list of accpetable
variables. This code could be in glibc.

This has the benefit that when an insecure new glibc internal
env. var. gets added, we've protected.

Cheers
Chris