diff options
| author | Nick Kralevich <nnk@google.com> | 2015-11-10 16:39:29 -0800 |
|---|---|---|
| committer | Nick Kralevich <nnk@google.com> | 2015-11-10 16:45:49 -0800 |
| commit | 2fb02651c894866c220bd64cbcd5fbd14e086b85 (patch) | |
| tree | 694ada2a51dd010fc14ca2ca055cb0b04ff51f1e /libc/stdio/stdio_ext.cpp | |
| parent | 2a7f1b335dcd08a480c4acc948ba202bae1a0a1f (diff) | |
libc_init_common.cpp: Clarify when environment stripping occurs
The current comment implies that we only strip sensitive
environment variables on executing a setuid program. This is
true but incomplete. The AT_SECURE flag is set whenever a
security transition occurs, such as executing a setuid program,
SELinux security transition, executing a file with file capabilities,
etc...
Fixup the comments.
Change-Id: I30a73992adfde14d6e5f642b3a1ead2ee56726be
Diffstat (limited to 'libc/stdio/stdio_ext.cpp')
0 files changed, 0 insertions, 0 deletions