<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">On 29/09/2014 13:00,
<a class="moz-txt-link-abbreviated" href="mailto:selinux-request@lists.fedoraproject.org">selinux-request@lists.fedoraproject.org</a> wrote:<br>
</div>
<blockquote
cite="mid:mailman.65.1411992007.32737.selinux@lists.fedoraproject.org"
type="cite">
<pre wrap=""><div class="moz-txt-sig">Message: 2
Date: Mon, 29 Sep 2014 10:00:00 +0200
From: Florian Weimer <a moz-do-not-send="true" class="moz-txt-link-rfc2396E" href="mailto:fweimer@redhat.com"><fweimer@redhat.com></a>
To: <a moz-do-not-send="true" class="moz-txt-link-abbreviated" href="mailto:selinux@lists.fedoraproject.org">selinux@lists.fedoraproject.org</a>
Subject: Re: SELinux and the bash exploit.
Message-ID: <a moz-do-not-send="true" class="moz-txt-link-rfc2396E" href="mailto:54291180.6020903@redhat.com"><54291180.6020903@redhat.com></a>
Content-Type: text/plain; charset=utf-8; format=flowed
On 09/25/2014 11:40 PM, Daniel J Walsh wrote:
</div></pre>
<blockquote type="cite" style="color: #000000;">
<pre wrap=""><span class="moz-txt-citetags">> </span><a moz-do-not-send="true" class="moz-txt-link-freetext" href="https://danwalsh.livejournal.com/71122.html">https://danwalsh.livejournal.com/71122.html</a>
</pre>
</blockquote>
<pre wrap="">I wonder why environment variables aren't labeled because they evidently
cross trust boundaries in surprising fashions.
<div class="moz-txt-sig">--
Florian Weimer / Red Hat Product Security
</div></pre>
</blockquote>
<br>
<br>
Hmm. Quite so. I sense a whole raft of environmental cleansing
mechanisms being added to SELinux any minute now..<br>
<br>
<br>
<br>
<pre class="moz-signature" cols="72">--
Ted Rule
Director, Layer3 Systems Ltd
Layer3 Systems Limited is registered in England. Company no 3130393
43 Pendle Road, Streatham, London, SW16 6RT
Tel: 020-8769-4484
Mob: 07946-908914
GPG Fingerprint = 9227:3434:b51d:c7a1:eea6:21e2:418a:8997:c104:7566
E: <a class="moz-txt-link-abbreviated" href="mailto:ejtr@layer3.co.uk">ejtr@layer3.co.uk</a>
W: <a class="moz-txt-link-freetext" href="http://www.layer3.co.uk/">http://www.layer3.co.uk/</a></pre>
</body>
</html>