[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Jailkit-dev] [bug #38079] [PATCH] Fix: environment variable checking
From: |
Jiri Horky |
Subject: |
[Jailkit-dev] [bug #38079] [PATCH] Fix: environment variable checking |
Date: |
Thu, 17 Jan 2013 10:38:43 +0000 |
User-agent: |
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.97 Safari/537.11 |
Follow-up Comment #2, bug #38079 (project jailkit):
Hi,
after some more consideration, I think this issue is even more critical than
it might seem from the beginning. If a user can set the LD_PRELOAD env.
variable, he is effectively able to run any program he wants, making the
jk_lsh useless.
Jiri Horky
_______________________________________________________
Reply to this item at:
<http://savannah.nongnu.org/bugs/?38079>
_______________________________________________
Message sent via/by Savannah
http://savannah.nongnu.org/