git: 9front

Download patch

ref: 7cb2db12f85c6dbc6a7f36bbfb655e6b7c19a28c
parent: 8451e4bd6efeb79fed23867d8dc9cb7ff0218a38
author: cinap_lenrek <cinap_lenrek@felloff.net>
date: Sat Oct 5 22:03:54 EDT 2024

auth/as: dont pollute parents environment or namespace (thanks jrmu, sl)

--- a/sys/src/cmd/auth/as.c
+++ b/sys/src/cmd/auth/as.c
@@ -71,6 +71,9 @@
 	if(argc == 0)
 		usage();
 
+	/* don't pollute the parents environment / namespace */
+	rfork(RFENVG|RFNAMEG);
+
 	if(becomeuser(argv[0]) < 0)
 		sysfatal("can't change uid for %s: %r", argv[0]);
 
--