diff options
author | Siddhesh Poyarekar <siddhesh@sourceware.org> | 2020-10-22 11:39:00 +0530 |
---|---|---|
committer | Siddhesh Poyarekar <siddhesh@sourceware.org> | 2020-10-22 13:52:38 +0530 |
commit | 6c2b579962853475747854127cfaf4ec4a8872a7 (patch) | |
tree | f5a4e0e0eec7ad0efc781665459d4a9974f8ceb0 /elf | |
parent | 4be44c3208b0498b108ce75e5d69e7c04d1cdf57 (diff) | |
download | glibc-6c2b579962853475747854127cfaf4ec4a8872a7.zip glibc-6c2b579962853475747854127cfaf4ec4a8872a7.tar.gz glibc-6c2b579962853475747854127cfaf4ec4a8872a7.tar.bz2 |
Reword description of SXID_* tunable properties
The SXID_* tunable properties only influence processes that are
AT_SECURE, so make that a bit more explicit in the documentation and
comment.
Revisiting the code after a few years I managed to confuse myself, so
I imagine there could be others who may have incorrectly assumed like
I did that the SXID_ERASE tunables are not inherited by children of
non-AT_SECURE processes.
Reviewed-by: Florian Weimer <fweimer@redhat.com>
Diffstat (limited to 'elf')
-rw-r--r-- | elf/dl-tunables.list | 11 |
1 files changed, 6 insertions, 5 deletions
diff --git a/elf/dl-tunables.list b/elf/dl-tunables.list index 35634ef..e1d8225 100644 --- a/elf/dl-tunables.list +++ b/elf/dl-tunables.list @@ -21,12 +21,13 @@ # minval: Optional minimum acceptable value # maxval: Optional maximum acceptable value # env_alias: An alias environment variable -# security_level: Specify security level of the tunable. Valid values are: +# security_level: Specify security level of the tunable for AT_SECURE binaries. +# Valid values are: # -# SXID_ERASE: (default) Don't read for AT_SECURE binaries and -# removed so that child processes can't read it. -# SXID_IGNORE: Don't read for AT_SECURE binaries, but retained for -# non-AT_SECURE subprocesses. +# SXID_ERASE: (default) Do not read and do not pass on to +# child processes. +# SXID_IGNORE: Do not read, but retain for non-AT_SECURE +# subprocesses. # NONE: Read all the time. glibc { |