Gentoo Archives: gentoo-portage-dev

From: Brian Harring <ferringb@g.o>
To: gentoo-portage-dev@l.g.o
Subject: Re: [gentoo-portage-dev] Re: Environment Whitelisting
Date: Tue, 23 Aug 2005 02:17:44
Message-Id: 20050823021557.GZ10816@nightcrawler
In Reply to: Re: [gentoo-portage-dev] Re: Environment Whitelisting by Kristian Benoit
1 On Mon, Aug 22, 2005 at 09:57:46PM -0400, Kristian Benoit wrote:
2 > On Mon, 2005-08-22 at 12:24 -0700, Zac Medico wrote:
3 > > AFAIK we can intercept getenv() calls the same way that we intercept filesystem calls. IMO the white/black/override lists would best be implemented at this level.
4 >
5 > getenv is'nt a system call.
6
7 Nor is glibc's open call, although it hands off to a syscall .
8 LD_PRELOAD just inserts (essentially) it's functions into the symbol
9 resolution order; your symbols get used rather then those from the
10 lib.
11
12 It's possible, I just don't like it. :)
13 ~harring