diff options
| author |   Mike Frysinger <vapier@gentoo.org> | 2009-03-31 01:53:46 -0400 |
|---|---|---|
| committer | Mike Frysinger <vapier@gentoo.org> | 2009-03-31 02:01:38 -0400 |
| commit | 45a3821f1c80b3d368e1879f73bd28384ac376cf (patch) | |
| tree | 4130bca144b954d7d51942e2b95dd267ac91bb2f /src | |
| parent | libsandbox: declare cmdline const since it is (diff) | |
| download | sandbox-45a3821f1c80b3d368e1879f73bd28384ac376cf.tar.gz sandbox-45a3821f1c80b3d368e1879f73bd28384ac376cf.tar.bz2 sandbox-45a3821f1c80b3d368e1879f73bd28384ac376cf.zip | |
sandbox: stop denying /etc/ld.so.preload
The very old method of loading sandbox was via ld.so.preload, so it was
added to default deny list. However, that's long dead, and since it does
not conflict with LD_PRELOAD, no point in preventing access.
Signed-off-by: Mike Frysinger <vapier@gentoo.org>
Diffstat (limited to 'src')
| -rw-r--r-- | src/environ.c | 2 |
1 files changed, 0 insertions, 2 deletions
diff --git a/src/environ.c b/src/environ.c index 9cc337c..b6d9550 100644 --- a/src/environ.c +++ b/src/environ.c @@ -192,8 +192,6 @@ static int setup_cfg_vars(struct sandbox_info_t *sandbox_info) if (-1 == setup_access_var(ENV_SANDBOX_DENY)) return -1; - if (NULL == getenv(ENV_SANDBOX_DENY)) - setenv(ENV_SANDBOX_DENY, LD_PRELOAD_FILE, 1); if (-1 == setup_access_var(ENV_SANDBOX_READ)) return -1; |