aboutsummaryrefslogtreecommitdiff
path: root/manual
diff options
context:
space:
mode:
authorJoe Talbott <joetalbott@gmail.com>2024-03-01 17:42:10 +0000
committerJoe Talbott <joetalbott@gmail.com>2024-03-01 17:43:03 +0000
commitd370155b9ab73d0c45bf968b7a9c823f4697a505 (patch)
tree213670fe2eb75e592b00f0ebf735dff52ef12e9e /manual
parent18a81441ba34466a4fcf491290443cbf1a7c20cc (diff)
downloadglibc-d370155b9ab73d0c45bf968b7a9c823f4697a505.zip
glibc-d370155b9ab73d0c45bf968b7a9c823f4697a505.tar.gz
glibc-d370155b9ab73d0c45bf968b7a9c823f4697a505.tar.bz2
manual/tunables - Add entry for enable_secure tunable.
Diffstat (limited to 'manual')
-rw-r--r--manual/tunables.texi10
1 files changed, 10 insertions, 0 deletions
diff --git a/manual/tunables.texi b/manual/tunables.texi
index be97190..4a7d04d 100644
--- a/manual/tunables.texi
+++ b/manual/tunables.texi
@@ -345,6 +345,16 @@ performance issues of @samp{1}.
The default value of this tunable is @samp{2}.
@end deftp
+@deftp Tunable glibc.rtld.enable_secure
+Used to run a program as if it were a setuid process. The only valid value
+is @samp{1} as this tunable can only be used to set and not unset
+@code{enable_secure}. Setting this tunable to @samp{1} also disables all other
+tunables. This tunable is intended to facilitate more extensive verification
+tests for @code{AT_SECURE} programs and not meant to be a security feature.
+
+The default value of this tunable is @samp{0}.
+@end deftp
+
@node Elision Tunables
@section Elision Tunables
@cindex elision tunables