From f3315ef2b941ac47909f427a6db39ed51459e3b0 Mon Sep 17 00:00:00 2001
From: deraadt <>
Date: Tue, 2 Jan 2001 23:03:49 +0000
Subject: do not honour environment variables if issetugid, and even more
 strongly support the random device

---
 src/lib/libcrypto/threads/mttest.c | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

(limited to 'src/lib/libcrypto/threads')

diff --git a/src/lib/libcrypto/threads/mttest.c b/src/lib/libcrypto/threads/mttest.c
index 100165948c..019add4d9c 100644
--- a/src/lib/libcrypto/threads/mttest.c
+++ b/src/lib/libcrypto/threads/mttest.c
@@ -248,7 +248,8 @@ bad:
 		goto end;
 		}
 
-	if (cipher == NULL) cipher=getenv("SSL_CIPHER");
+	if (cipher == NULL && issetugid() == 0)
+		cipher=getenv("SSL_CIPHER");
 
 	SSL_load_error_strings();
 	OpenSSL_add_ssl_algorithms();
-- 
cgit v1.2.3-55-g6feb