diff options
author | Brent Cook <busterb@gmail.com> | 2015-04-14 07:55:23 -0500 |
---|---|---|
committer | Brent Cook <busterb@gmail.com> | 2015-04-14 07:55:23 -0500 |
commit | 3096ab0e45351b05b1f1df51cedc183ba6ca7763 (patch) | |
tree | 01cb87f1fd541907d481311064bdab5d2cdf3691 /README | |
parent | fe3f7fc6365bfaac3418a72256b8c11603e80cbf (diff) | |
download | portable-3096ab0e45351b05b1f1df51cedc183ba6ca7763.tar.gz portable-3096ab0e45351b05b1f1df51cedc183ba6ca7763.tar.bz2 portable-3096ab0e45351b05b1f1df51cedc183ba6ca7763.zip |
remove issetuigid wrappers, now that all getenv calls are gone.
From deraadt@ upstream:
Remove all getenv() calls, especially those wrapped by issetugid().
getenv()'s wrapped by issetugid() are safe, but issetugid() is ...
difficult to impliment on many operating systems. By accident, a grand
experiment was run over the last year, where issetugid() returned 1 (the
safe value) on a few operating systems. Noone noticed & complained that
certain environment variables were not working.......
Diffstat (limited to 'README')
-rw-r--r-- | README | 4 |
1 files changed, 2 insertions, 2 deletions
@@ -43,8 +43,8 @@ programs to LibreSSL in order to use it, just as in moving from OpenSSL 0.9.8 | |||
43 | to 1.0.1. | 43 | to 1.0.1. |
44 | 44 | ||
45 | The project attempts to provide working alternatives for operating systems with | 45 | The project attempts to provide working alternatives for operating systems with |
46 | limited or broken security primitives (e.g. arc4random(3), issetugid(2)) and | 46 | limited or broken security primitives (e.g. arc4random(3)) and assists with |
47 | assists with improving OS-native implementations where possible. | 47 | improving OS-native implementations where possible. |
48 | 48 | ||
49 | LibreSSL portable will build on any reasonably modern version of Linux, | 49 | LibreSSL portable will build on any reasonably modern version of Linux, |
50 | Solaris, or OSX with a standards-compliant compiler and C library. | 50 | Solaris, or OSX with a standards-compliant compiler and C library. |