OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: [RFC] environment sanitisation wrapper
From: Sean Hunter (seanuncarved.com)
Date: Sun May 28 2000 - 13:09:14 CDT

In the light of the thunderous silence that greeted my initial
wrapper, I've improved it a little, and am now running it succesfully
on my production hosts. See attached for the latest.

Suggestions (esp for candidates for the black- and whitelists)
gratefully received.

Sean

On Sun, May 28, 2000 at 03:39:22PM +0100, Sean Hunter wrote:
> Given the recent debates over environment variables, I decided to
> write a small wrapper to ensure a sane environment for important
> programs. What it does is remove any unwanted env vars before
> executing a given program. So, instead of running "foobar" you'll run
> "safe_env foobar", or if foobar wants to see the BAZ env var, you do
> "safe_env -s BAZ foobar" or something.
>
> Is this at all useful? If so, what environment variables do we trust
> to add to this safe_builtins list? Have I done anything dumb in the
> implimentation?
>
> Sean
>