coreutils: Protect against env -a for security#10773
coreutils: Protect against env -a for security#10773oech3 wants to merge 1 commit intouutils:mainfrom
Conversation
|
GNU testsuite comparison: |
01b6655 to
753f86c
Compare
|
GNU testsuite comparison: |
Merging this PR will not alter performance
Comparing Footnotes
|
59e307c to
ac75ff7
Compare
|
GNU testsuite comparison: |
|
I think it would make sense for this code to go into the validation.rs file instead of in the main.rs, then you don't have to worry about importing libc. It would be good to have an additional integration test that shows the env -a working |
This comment was marked as resolved.
This comment was marked as resolved.
|
coreutils/src/common/validation.rs Lines 69 to 77 in 194d980 Wait! Why are we using |
This comment was marked as resolved.
This comment was marked as resolved.
1337cbc to
40581ee
Compare
|
GNU testsuite comparison: |
This comment was marked as resolved.
This comment was marked as resolved.
|
GNU testsuite comparison: |
|
GNU testsuite comparison: |
This comment was marked as resolved.
This comment was marked as resolved.
|
GNU testsuite comparison: |
|
GNU testsuite comparison: |
This comment was marked as resolved.
This comment was marked as resolved.
4539e89 to
da88027
Compare
|
GNU testsuite comparison: |
|
GNU testsuite comparison: |
|
GNU testsuite comparison: |
|
@ChrisDryden @Ecordonnier Is this OK? |
|
GNU testsuite comparison: |
|
GNU testsuite comparison: |
|
GNU testsuite comparison: |
|
GnuTests is still flakey |
I'll have a look. I have not much time available at the moment. |
61b8b35 to
8b9fa64
Compare
|
Switched to |
|
GNU testsuite comparison: |
|
GNU testsuite comparison: |
env -a false lsdoes not fail. Works under masked/proc.Closes #10135