Skip to content

coreutils: Protect against env -a for security#10773

Open
oech3 wants to merge 1 commit intouutils:mainfrom
oech3:auxval
Open

coreutils: Protect against env -a for security#10773
oech3 wants to merge 1 commit intouutils:mainfrom
oech3:auxval

Conversation

@oech3
Copy link
Contributor

@oech3 oech3 commented Feb 6, 2026

env -a false ls does not fail. Works under masked /proc.
Closes #10135

@github-actions
Copy link

github-actions bot commented Feb 6, 2026

GNU testsuite comparison:

Skip an intermittent issue tests/tty/tty-eof (fails in this run but passes in the 'main' branch)
Skipping an intermittent issue tests/misc/usage_vs_getopt (passes in this run but fails in the 'main' branch)
Skipping an intermittent issue tests/shuf/shuf-reservoir (passes in this run but fails in the 'main' branch)
Skipping an intermittent issue tests/sort/sort-stale-thread-mem (passes in this run but fails in the 'main' branch)
Note: The gnu test tests/basenc/bounded-memory is now being skipped but was previously passing.

@oech3 oech3 marked this pull request as ready for review February 6, 2026 19:18
@oech3 oech3 force-pushed the auxval branch 3 times, most recently from 01b6655 to 753f86c Compare February 7, 2026 07:47
@github-actions
Copy link

github-actions bot commented Feb 7, 2026

GNU testsuite comparison:

Skip an intermittent issue tests/shuf/shuf-reservoir (fails in this run but passes in the 'main' branch)
Skip an intermittent issue tests/sort/sort-stale-thread-mem (fails in this run but passes in the 'main' branch)

@oech3
Copy link
Contributor Author

oech3 commented Feb 7, 2026

I'm not familiar with Android, but let's try.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Ubuntu patch prevents custom argv[0]

1 participant