1 |
>>>init.d scripts should have a pure env given to them ... which means, they |
2 |
>>>should be run with `env -i` and have only whitelisted variables given to |
3 |
>>>them (and everything that appears in /etc/conf.d/$service /etc/conf.d/rc |
4 |
>>>and /etc/rc.conf) ... |
5 |
>> |
6 |
>>Now that may be too few variables. At least the variable LANG (or |
7 |
>>whatever the system-admin may chose to set) could be seen as a |
8 |
>>system-wide language-setting. It could be intentional, that at least |
9 |
>>some variables are available to the started server-processes. Especially |
10 |
>>a system-wide language-setting would be a good idea. |
11 |
> |
12 |
> that is the point of the whitelist idea ... we gather a 'full |
13 |
> env' (source /etc/profile i guess) and rip out just the whitelisted variables |
14 |
> to pass on to init scripts |
15 |
|
16 |
OK, you just didn't list /etc/profile in your first reply. The |
17 |
whitelist-thing is a good idea and makes it very flexible. |