>>>init.d scripts should have a pure env given to them ... which means, they >>>should be run with `env -i` and have only whitelisted variables given to >>>them (and everything that appears in /etc/conf.d/$service /etc/conf.d/rc >>>and /etc/rc.conf) ... >> >>Now that may be too few variables. At least the variable LANG (or >>whatever the system-admin may chose to set) could be seen as a >>system-wide language-setting. It could be intentional, that at least >>some variables are available to the started server-processes. Especially >>a system-wide language-setting would be a good idea. > > that is the point of the whitelist idea ... we gather a 'full > env' (source /etc/profile i guess) and rip out just the whitelisted variables > to pass on to init scripts
OK, you just didn't list /etc/profile in your first reply. The whitelist-thing is a good idea and makes it very flexible.
signature.asc
Description: OpenPGP digital signature
