Bug #71646 - Don't allow the HISTFILE variable into the ebuild environment

since it triggers sandbox violations.

svn path=/main/trunk/; revision=13403

diff --git a/bin/ebuild.sh b/bin/ebuild.sh
index 9cbd748e6743a731cfeebc93254c80c16f0d9b69..83e79e81866a65ad1f20741fef4a8157b53f14e2 100755 (executable)
--- a/bin/ebuild.sh
+++ b/bin/ebuild.sh
@@ -1620,7 +1620,7 @@ filter_readonly_variables() {
                SANDBOX_DEBUG_LOG SANDBOX_DISABLED SANDBOX_LIB
                SANDBOX_LOG SANDBOX_ON"
        filtered_vars="${readonly_bash_vars} ${READONLY_PORTAGE_VARS}
-               BASH_.* PATH POSIXLY_CORRECT"
+               BASH_.* HISTFILE PATH POSIXLY_CORRECT"
        if hasq --filter-sandbox $* ; then
                filtered_vars="${filtered_vars} SANDBOX_.*"
        else

diff --git a/pym/portage/__init__.py b/pym/portage/__init__.py
index 4bb2513ae2ae62dbc605d871ce0c0c389918a747..ea04d5e87c07239a7cef1347304dfbfd107f1b35 100644 (file)
--- a/pym/portage/__init__.py
+++ b/pym/portage/__init__.py
@@ -1127,7 +1127,7 @@ class config(object):
 
        # variables that break bash
        _environ_filter += [
-               "POSIXLY_CORRECT",
+               "HISTFILE", "POSIXLY_CORRECT",
        ]
 
        # portage config variables and variables set directly by portage