On 08/17/2013 12:29 AM, Caroline Tice wrote:
OK, I *think* I have done as you requested. I have to try the
environment variable before falling back on stderr (there's a program
we want to use this on that disables the ability to write to stderr).
I have added the secure_getenv stuff as you requested. The fixed patch
is attached.
Please review the patch and let me know if this is OK to commit. Thanks!
This looks good, but I have problems regenerating the libvtv/configure
file. Could you please send me your copy?
I want to make sure that the secure_getenv symbol actually ends up in
libvtv.so.
--
Florian Weimer / Red Hat Product Security Team