aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorMike Frysinger <vapier@gentoo.org>2016-03-30 01:17:21 -0400
committerMike Frysinger <vapier@gentoo.org>2016-03-30 01:17:21 -0400
commit31a135d261a9bc1d65b1fa484345a858bab84db8 (patch)
treeb78cb7fa181704fe5e3dd537410814f14fd9827f
parentlibsandbox: fix symtab walking with some ELFs (diff)
downloadsandbox-31a135d261a9bc1d65b1fa484345a858bab84db8.tar.gz
sandbox-31a135d261a9bc1d65b1fa484345a858bab84db8.tar.bz2
sandbox-31a135d261a9bc1d65b1fa484345a858bab84db8.zip
libsandbox: whitelist execvpe
URL: https://bugs.gentoo.org/578516 Reported-by: Toralf Förster <toralf.foerster@gmx.de> Signed-off-by: Mike Frysinger <vapier@gentoo.org>
-rw-r--r--libsandbox/libsandbox.c1
1 files changed, 1 insertions, 0 deletions
diff --git a/libsandbox/libsandbox.c b/libsandbox/libsandbox.c
index cbe1aa1..e809308 100644
--- a/libsandbox/libsandbox.c
+++ b/libsandbox/libsandbox.c
@@ -710,6 +710,7 @@ static int check_access(sbcontext_t *sbcontext, int sb_nr, const char *func,
sb_nr == SB_NR_EXECV ||
sb_nr == SB_NR_EXECVP ||
sb_nr == SB_NR_EXECVE ||
+ sb_nr == SB_NR_EXECVPE ||
sb_nr == SB_NR_FEXECVE))
{
retval = check_prefixes(sbcontext->read_prefixes,