From: Matt Zimmerman <mdz-8fiUuRrzOP0dnm+yROfE0A@public.gmane.org>
To: "Stéphane Aulery" <saulery-GANU6spQydw@public.gmane.org>
Cc: 679323-61a8vm9lEZVf4u+23C9RwQ@public.gmane.org,
linux-man-u79uwXL29TY76Z2rM5mHXA@public.gmane.org
Subject: Re: clearenv(3): implies that it's a security tool
Date: Thu, 18 Feb 2016 12:34:48 -0800 [thread overview]
Message-ID: <20160218203447.GF3560@alcor.net> (raw)
In-Reply-To: <2022845728.87847295.1455816499626.JavaMail.root-ejyA1lUx/7j5pO4zsKA69P9ALaXTbT7g0e7PPNI6Mm0@public.gmane.org>
Thanks for following up. My recommendation is to say something like:
This function DOES NOT securely erase the contents of the environment.
Security-conscious applications which need to do this should use ....
instead.
On Thu, Feb 18, 2016 at 06:28:19PM +0100, Stéphane Aulery wrote:
> severity 679323 minor
> stop
> -----
>
> Hello Matt,
>
> I dig your bug reports about the clearenv() function.
>
> Does the sentence below would do, please?
>
>
> Used by security-conscious application, with the reservation
> that the memory is not zeroed by the glibc implementation
> before release.
>
>
> Regards,
>
> --
> Stéphane Aulery
--
- mdz
--
To unsubscribe from this list: send the line "unsubscribe linux-man" in
the body of a message to majordomo-u79uwXL29TY76Z2rM5mHXA@public.gmane.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
next prev parent reply other threads:[~2016-02-18 20:34 UTC|newest]
Thread overview: 7+ messages / expand[flat|nested] mbox.gz Atom feed top
2016-02-18 17:28 clearenv(3): implies that it's a security tool Stéphane Aulery
[not found] ` <2022845728.87847295.1455816499626.JavaMail.root-ejyA1lUx/7j5pO4zsKA69P9ALaXTbT7g0e7PPNI6Mm0@public.gmane.org>
2016-02-18 20:34 ` Matt Zimmerman [this message]
[not found] ` <20160218203447.GF3560-GlOw+ZFk85JeoWH0uzbU5w@public.gmane.org>
2016-02-18 21:44 ` Bug#679323: " Stéphane Aulery
2016-02-19 11:59 ` Michael Kerrisk (man-pages)
[not found] ` <CAKgNAkh0qR-5Kj0-bc6QtAM7j44s41YfNMUOfi_BAiFHYVOO5g-JsoAwUIsXosN+BqQ9rBEUg@public.gmane.org>
2016-02-19 12:25 ` Stéphane Aulery
2016-02-19 16:22 ` Matt Zimmerman
[not found] ` <20160219162222.GB14410-GlOw+ZFk85JeoWH0uzbU5w@public.gmane.org>
2016-02-19 16:43 ` Stéphane Aulery
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20160218203447.GF3560@alcor.net \
--to=mdz-8fiuurrzop0dnm+yrofe0a@public.gmane.org \
--cc=679323-61a8vm9lEZVf4u+23C9RwQ@public.gmane.org \
--cc=linux-man-u79uwXL29TY76Z2rM5mHXA@public.gmane.org \
--cc=saulery-GANU6spQydw@public.gmane.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).