unsecvars.h 899 B

12345678910111213141516171819202122232425262728293031
  1. /*
  2. * Copyright (C) 2000-2005 by Erik Andersen <andersen@codepoet.org>
  3. *
  4. * GNU Lesser General Public License version 2.1 or later.
  5. */
  6. /*
  7. * Environment variable to be removed for SUID programs. The names are all
  8. * stuffed in a single string which means they have to be terminated with a
  9. * '\0' explicitly.
  10. */
  11. #define UNSECURE_ENVVARS \
  12. "LD_PRELOAD\0" \
  13. "LD_LIBRARY_PATH\0" \
  14. "LD_DEBUG\0" \
  15. "LD_DEBUG_OUTPUT\0" \
  16. "LD_TRACE_LOADED_OBJECTS\0" \
  17. "TMPDIR\0"
  18. /*
  19. * LD_TRACE_LOADED_OBJECTS is not in glibc-2.3.5's unsecvars.h
  20. * though used by ldd
  21. *
  22. * These environment variables are defined by glibc but ignored in
  23. * uClibc, but may very well have an equivalent in uClibc.
  24. *
  25. * LD_ORIGIN_PATH, LD_PROFILE, LD_USE_LOAD_BIAS, LD_DYNAMIC_WEAK, LD_SHOW_AUXV,
  26. * GCONV_PATH, GETCONF_DIR, HOSTALIASES, LOCALDOMAIN, LOCPATH, MALLOC_TRACE,
  27. * NLSPATH, RESOLV_HOST_CONF, RES_OPTIONS, TZDIR
  28. */