From 23f4ee4359d10f66e1938ce6b1d92d3cc77865ff Mon Sep 17 00:00:00 2001 From: Simo Sorce Date: Wed, 20 Nov 2013 11:58:22 -0500 Subject: Use secure_getenv in client and mechglue module MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit proxymehc.so may be used in setuid binaries so follow best security practices and use secure_getenv() if available. Fallback to poorman emulation when secure_getenv() is not available. Resolves: https://fedorahosted.org/gss-proxy/ticket/110 Reviewed-by: Günther Deschner --- proxy/src/client/gpm_common.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'proxy/src/client') diff --git a/proxy/src/client/gpm_common.c b/proxy/src/client/gpm_common.c index df1f5a1..74296da 100644 --- a/proxy/src/client/gpm_common.c +++ b/proxy/src/client/gpm_common.c @@ -68,7 +68,7 @@ static int get_pipe_name(struct gpm_ctx *gpmctx, char *name) const char *socket; int ret; - socket = getenv("GSSPROXY_SOCKET"); + socket = gp_getenv("GSSPROXY_SOCKET"); if (!socket) { socket = GP_SOCKET_NAME; } -- cgit