OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: Here's another glibc env. var.
From: Alan Cox (alanlxorguk.ukuu.org.uk)
Date: Fri May 26 2000 - 18:11:33 CDT

> I think we need a telnetd approach. Upon exec() of privileged program, we
> nuke the entire environment apart from a list of accpetable
> variables. This code could be in glibc.
> This has the benefit that when an insecure new glibc internal
> env. var. gets added, we've protected.

Its hard to figure the env variable list out and maintain it.

Alan