4 ms·

Had anyone suggested and/or implemented something like building a tiny wrapper for bash that would clean environment and then execve("/bin/bash.vulnerable", arg

Had anyone suggested and/or implemented something like building a tiny wrapper for bash that would clean environment and then execve("/bin/bash.vulnerable", argv, cleaned_envp)?

sounds 12y ago
In the red hat links (already in the comments here) there is an LD_PRELOAD file which cleans the environment for _all_ your processes.
mzs 12y ago
$ /usr/bin/env - /usr/local/bin/bash -c set sh BASH=/usr/local/bin/bash ...