From cf5782b63efff3919edc4fe46bd88b98c0adb713 Mon Sep 17 00:00:00 2001 From: Miroslav Lichvar Date: Tue, 22 Aug 2023 09:17:15 +0200 Subject: [PATCH] ignore TERMINFO and HOME only if setuid/setgid/capability This allows the root user to have its own private terminfo database, but still prevent setuid binaries from using untrusted terminfos. --- ncurses.spec | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ncurses.spec b/ncurses.spec index 57c516f..ebacdca 100644 --- a/ncurses.spec +++ b/ncurses.spec @@ -128,7 +128,7 @@ common_options="\ --enable-pc-files \ --enable-xmc-glitch \ --disable-root-access \ - --disable-root-environ \ + --disable-setuid-environ \ --disable-stripping \ --disable-wattr-macros \ --with-cxx-shared \