[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Jailkit-dev] [bug #38079] [PATCH] Fix: environment variable checking
|
From: |
Jiri Horky |
|
Subject: |
[Jailkit-dev] [bug #38079] [PATCH] Fix: environment variable checking |
|
Date: |
Mon, 14 Jan 2013 09:29:58 +0000 |
|
User-agent: |
Mozilla/5.0 (X11; Linux x86_64; rv:10.0.11) Gecko/20100101 Firefox/10.0.11 |
Follow-up Comment #1, bug #38079 (project jailkit):
Hi,
(sorry for the first message, I hit "return" accidentally).
When chrooting, jailkit deletes non-allowed environment variables.
Unfortunately it does not refresh its index to the env array after deleting an
element from it and thus it skips the next element of the deleted one, causing
possible a security problem as the next element is never checked. The attached
patch fixes this.
The patch was actually written by my colleague Lukas Hejtmanek.
Regards
Jiri Horky
_______________________________________________________
Reply to this item at:
<http://savannah.nongnu.org/bugs/?38079>
_______________________________________________
Message sent via/by Savannah
http://savannah.nongnu.org/