From 26bd852e4d60f4ea53f06ad54ac7732ee4d2a775 Mon Sep 17 00:00:00 2001 From: Fabian Groffen Date: Mon, 19 Nov 2007 19:15:12 +0000 Subject: [PATCH] I made a pass over what's in environment.bz2 and unset all that look like they should never ever be initialised like they are saved on the target system (e.g. non-matching prefix), and those that just could leak some information you don't want to be leaked in a paranoia mood. svn path=/main/branches/prefix/; revision=8530 --- bin/ebuild.sh | 24 ++++++++++++++++++++++++ 1 file changed, 24 insertions(+) diff --git a/bin/ebuild.sh b/bin/ebuild.sh index 99099c0a0..2a083bb8a 100755 --- a/bin/ebuild.sh +++ b/bin/ebuild.sh @@ -1405,6 +1405,30 @@ save_ebuild_env() { newpdepend do_newdepend remove_path_entry killparent \ save_ebuild_env + # These better not be used on a different system + unset -f BASH BUILD_PREFIX D DEFAULT_PATH DISTCC_DIR DISTDIR \ + EBUILD ECLASSDIR ED EPATCH_SOURCE EPREFIX EROOT \ + FETCH_COMMAND FILESDIR HOME HOSTTYPE INFOPATH INPUT_DEVICES \ + LCD_DEVICES LESS LESSOPEN MACHTYPE MAKEOPTS MANPATH O PAGER \ + PATH PKGDIR PKG_LOGDIR PKG_TMPDIR PORTAGE_ACTUAL_DISTDIR \ + PORTAGE_BASHRC PORTAGE_BINPKG_TMPFILE PORTAGE_BIN_PATH \ + PORTAGE_BUILDDIR PORTAGE_DEPCACHEDIR PORTAGE_ELOG_CLASSES \ + PORTAGE_ELOG_MAILSUBJECT PORTAGE_ELOG_SYSTEM PORTAGE_LOG_FILE \ + PORTAGE_PYM_PATH PORTAGE_TMPDIR PORTDIR PROFILE_PATHS \ + PWORKDIR PYTHONPATH RESUMECOMMAND ROOT ROOTPATH \ + SANDBOX_DISABLED SANDBOX_LOG SANDBOX_ON SANDBOX_PREDICT \ + STARTDIR TMP TMPDIR USE_ORDER USE_ORDER + + # Some paranoia filters + unset -f CVS_RSH EUID GCC_SPECS GENTOO_MIRRORS HOSTNAME OLDPWD \ + PORTAGE_ARCHLIST PORTAGE_ELOG_MAILFROM PORTAGE_ELOG_MAILURI \ + PORTAGE_GID PORTAGE_GROUP PORTAGE_INST_GID PORTAGE_INST_UID \ + PORTAGE_RSYNC_OPTS PORTAGE_USER PWD SHELL SHELLOPTS SYNC \ + TERM UID dir srcdir STY SSH_AGENT_PID TERM_PROGRAM HOST \ + TERM_PROGRAM_VERSION GROUP USER SSH_AUTH_SOCK \ + __CF_USER_TEXT_ENCODING ECHANGELOG_USER TERMINFO VENDOR \ + LOGNAME DISPLAY SECURITYSESSIONID REMOTEHOST LS_COLORS MAIL + set export ) | egrep -v -e "${var_grep}" -- 2.26.2