[PATCH, vtv update] Fix /tmp directory issues in libvtv

Florian Weimer fweimer@redhat.com
Fri Aug 9 07:08:00 GMT 2013


On 08/09/2013 12:09 AM, Caroline Tice wrote:
> +  logs_dir = getenv ("VTV_LOGS_DIR");

This needs to use __secure_getenv or secure_getenv, depending on the 
glibc version, so that it doesn't wreak havoc in SUID/SGID binaries (or 
after other kinds of privilege transitions).

Relevant autoconf checks are described here:

<http://sourceware.org/glibc/wiki/Tips_and_Tricks/secure_getenv>

-- 
Florian Weimer / Red Hat Product Security Team



More information about the Gcc-patches mailing list