rtld-elf: Mark LD_SHOW_AUXV insecure

This prevents dumping the memory layout of setugid processes.

MFC after:	3 days
Reviewed by:	kib
Differential Revision:	https://reviews.freebsd.org/D54033

This commit is contained in:

Dag-Erling Smørgrav

2025-12-03 11:09:31 +01:00

parent ef8a0ef2aa

commit 5242bcff20

1 changed files with 1 additions and 1 deletions

									
										libexec/rtld-elf/rtld.c
									
		+1
		-1
	
												View File
												
				@@ -395,7 +395,7 @@ static struct ld_env_var_desc ld_env_vars[] = {

					LD_ENV_DESC(TRACE_LOADED_OBJECTS_FMT1, false),

					LD_ENV_DESC(TRACE_LOADED_OBJECTS_FMT2, false),

					LD_ENV_DESC(TRACE_LOADED_OBJECTS_ALL, false),

					LD_ENV_DESC(SHOW_AUXV, false),

					LD_ENV_DESC(SHOW_AUXV, true),

					LD_ENV_DESC(STATIC_TLS_EXTRA, false),

					LD_ENV_DESC(NO_DL_ITERATE_PHDR_AFTER_FORK, false),

				};