Bug #189417 - Whitelist BASH_ENV since we need to have it set in order
authorZac Medico <zmedico@gentoo.org>
Fri, 7 Dec 2007 22:08:25 +0000 (22:08 -0000)
committerZac Medico <zmedico@gentoo.org>
Fri, 7 Dec 2007 22:08:25 +0000 (22:08 -0000)
to prevent sandbox from causing env leakage by sourcing /etc/profile
via it's bashrc.

svn path=/main/trunk/; revision=8866

pym/portage/__init__.py

index c88cd676e21cff257cbe8e8dbb1bd4fa2371991f..dbbe97e3ae3201faa948d52f53a8d882c3a812c1 100644 (file)
@@ -864,7 +864,7 @@ class config(object):
        # constructor. Also, preserve XARGS since it is set by the
        # portage.data module.
        _environ_whitelist += [
-               "BUILD_PREFIX", "D",
+               "BASH_ENV", "BUILD_PREFIX", "D",
                "DISTDIR", "DOC_SYMLINKS_DIR", "EBUILD_EXIT_STATUS_FILE",
                "EBUILD", "EBUILD_PHASE", "ECLASSDIR", "ECLASS_DEPTH", "EMERGE_FROM",
                "FEATURES", "FILESDIR", "HOME", "PATH",