[Bug 235185] www/fcgiwrap: environment should be cleaned in /usr/local/etc/rc.d/fcgiwrap
bugzilla-noreply at freebsd.org
bugzilla-noreply at freebsd.org
Fri Jan 25 19:52:15 UTC 2019
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=235185
--- Comment #19 from Rodney W. Grimes <rgrimes at FreeBSD.org> ---
(In reply to vas from comment #11)
If you are calling this exporting of the environment a feature of fcgiwrap then
us revoking the environment with env -i would be removing an authors inteded
feature. Do you see the problem I might have with that point now? If the
authors documentation should now or at some time in the future given an example
of "printenv" as a way to expose the environment and we have crafted that
feature away it creates a POLA issue.
--
You are receiving this mail because:
You are on the CC list for the bug.
More information about the freebsd-rc
mailing list