Issue #110: Use secure_getenv() in proxymech.so - gssproxy

It would be safer to avoid reading environment variables if proxymech.so is ever used in a setuid program.

Change the code to use secure_getenv() to accomplish that.

Ticket has been cloned to Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=1032684

Fixed in 23f4ee4

Metadata Update from @simo:
- Issue assigned to simo

Feb 28, 2017

Assignee

simo

Tags

None

Blocking

None

Depending on

None

Priority

Lowest

type

task

component

mechglue interface

fweimer

rhbz

Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.