shithub: front

Download patch

ref: 40177b86bf5108016fc3a275096e44dc4ada5e9c
parent: ddcfc1de224a58e01bcf47bbb250dc71e796629d
author: cinap_lenrek <cinap_lenrek@felloff.net>
date: Sat Oct 5 22:03:54 EDT 2024

auth/as: dont pollute parents environment or namespace (thanks jrmu, sl)

--- a/sys/src/cmd/auth/as.c
+++ b/sys/src/cmd/auth/as.c
@@ -71,6 +71,9 @@
 	if(argc == 0)
 		usage();
 
+	/* don't pollute the parents environment / namespace */
+	rfork(RFENVG|RFNAMEG);
+
 	if(becomeuser(argv[0]) < 0)
 		sysfatal("can't change uid for %s: %r", argv[0]);
 
--