From f4baf96c6f32331fea597542cfe8218aa86646b9 Mon Sep 17 00:00:00 2001 From: Miroslav Lichvar Date: Mon, 22 May 2023 16:28:15 +0200 Subject: [PATCH] build with options disabling root file access and environment This should avoid or limit the security impact of issues in parsing of terminfo files or the TERMINFO environment variable for setuid/gid binaries. --- ncurses.spec | 2 ++ 1 file changed, 2 insertions(+) diff --git a/ncurses.spec b/ncurses.spec index 67d5656..8d79faf 100644 --- a/ncurses.spec +++ b/ncurses.spec @@ -127,6 +127,8 @@ common_options="\ --enable-overwrite \ --enable-pc-files \ --enable-xmc-glitch \ + --disable-root-access \ + --disable-root-environ \ --disable-stripping \ --disable-wattr-macros \ --with-cxx-shared \