diff options
| author |   Mike Frysinger <vapier@gentoo.org> | 2009-03-31 01:53:46 -0400 |
|---|---|---|
| committer | Mike Frysinger <vapier@gentoo.org> | 2009-03-31 02:01:38 -0400 |
| commit | 45a3821f1c80b3d368e1879f73bd28384ac376cf (patch) | |
| tree | 4130bca144b954d7d51942e2b95dd267ac91bb2f /libsbutil/sbutil.h | |
| parent | libsandbox: declare cmdline const since it is (diff) | |
| download | sandbox-45a3821f1c80b3d368e1879f73bd28384ac376cf.tar.gz sandbox-45a3821f1c80b3d368e1879f73bd28384ac376cf.tar.bz2 sandbox-45a3821f1c80b3d368e1879f73bd28384ac376cf.zip | |
sandbox: stop denying /etc/ld.so.preload
The very old method of loading sandbox was via ld.so.preload, so it was
added to default deny list. However, that's long dead, and since it does
not conflict with LD_PRELOAD, no point in preventing access.
Signed-off-by: Mike Frysinger <vapier@gentoo.org>
Diffstat (limited to 'libsbutil/sbutil.h')
| -rw-r--r-- | libsbutil/sbutil.h | 1 |
1 files changed, 0 insertions, 1 deletions
diff --git a/libsbutil/sbutil.h b/libsbutil/sbutil.h index 9a4c3b7..d76e0c9 100644 --- a/libsbutil/sbutil.h +++ b/libsbutil/sbutil.h @@ -20,7 +20,6 @@ #define SANDBOX_CONFD_DIR ETCDIR "/sandbox.d" #define LD_PRELOAD_EQ "LD_PRELOAD=" -#define LD_PRELOAD_FILE "/etc/ld.so.preload" #define LIB_NAME "libsandbox.so" #define BASHRC_NAME "sandbox.bashrc" #define TMPDIR "/tmp" |