jailkit-dev
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Jailkit-dev] [bug #38079] [PATCH] Fix: environment variable checking


From: Jiri Horky
Subject: [Jailkit-dev] [bug #38079] [PATCH] Fix: environment variable checking
Date: Thu, 17 Jan 2013 10:38:43 +0000
User-agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.97 Safari/537.11

Follow-up Comment #2, bug #38079 (project jailkit):

Hi,

after some more consideration, I think this issue is even more critical than
it might seem from the beginning. If a user can set the LD_PRELOAD env.
variable, he is effectively able to run any program he wants, making the
jk_lsh useless.

Jiri Horky 

    _______________________________________________________

Reply to this item at:

  <http://savannah.nongnu.org/bugs/?38079>

_______________________________________________
  Message sent via/by Savannah
  http://savannah.nongnu.org/




reply via email to

[Prev in Thread] Current Thread [Next in Thread]