Re: selinux Digest, Vol 127, Issue 13

[Ted Rule]

On 29/09/2014 13:00, [e-mail] wrote:
> Message: 2 Date: Mon, 29 Sep 2014 10:00:00 +0200 From: Florian Weimer
>  To: [e-mail] Subject: Re:
> SELinux and the bash exploit. Message-ID:
>  Content-Type: text/plain; charset=utf-8;
> format=flowed On 09/25/2014 11:40 PM, Daniel J Walsh wrote:
> > > https://danwalsh.livejournal.com/71122.html
>
> I wonder why environment variables aren't labeled because they evidently 
> cross trust boundaries in surprising fashions.
>
> -- Florian Weimer / Red Hat Product Security

Hmm. Quite so. I sense a whole raft of environmental cleansing
mechanisms being added to SELinux any minute now..