aboutsummaryrefslogtreecommitdiff
path: root/README
diff options
context:
space:
mode:
authorBrent Cook <busterb@gmail.com>2015-04-14 07:55:23 -0500
committerBrent Cook <busterb@gmail.com>2015-04-14 07:55:23 -0500
commit3096ab0e45351b05b1f1df51cedc183ba6ca7763 (patch)
tree01cb87f1fd541907d481311064bdab5d2cdf3691 /README
parentfe3f7fc6365bfaac3418a72256b8c11603e80cbf (diff)
downloadportable-3096ab0e45351b05b1f1df51cedc183ba6ca7763.tar.gz
portable-3096ab0e45351b05b1f1df51cedc183ba6ca7763.tar.bz2
portable-3096ab0e45351b05b1f1df51cedc183ba6ca7763.zip
remove issetuigid wrappers, now that all getenv calls are gone.
From deraadt@ upstream: Remove all getenv() calls, especially those wrapped by issetugid(). getenv()'s wrapped by issetugid() are safe, but issetugid() is ... difficult to impliment on many operating systems. By accident, a grand experiment was run over the last year, where issetugid() returned 1 (the safe value) on a few operating systems. Noone noticed & complained that certain environment variables were not working.......
Diffstat (limited to 'README')
-rw-r--r--README4
1 files changed, 2 insertions, 2 deletions
diff --git a/README b/README
index ce1d9ef..8ac40af 100644
--- a/README
+++ b/README
@@ -43,8 +43,8 @@ programs to LibreSSL in order to use it, just as in moving from OpenSSL 0.9.8
43to 1.0.1. 43to 1.0.1.
44 44
45The project attempts to provide working alternatives for operating systems with 45The project attempts to provide working alternatives for operating systems with
46limited or broken security primitives (e.g. arc4random(3), issetugid(2)) and 46limited or broken security primitives (e.g. arc4random(3)) and assists with
47assists with improving OS-native implementations where possible. 47improving OS-native implementations where possible.
48 48
49LibreSSL portable will build on any reasonably modern version of Linux, 49LibreSSL portable will build on any reasonably modern version of Linux,
50Solaris, or OSX with a standards-compliant compiler and C library. 50Solaris, or OSX with a standards-compliant compiler and C library.