Files
gentoo/sys-apps/firejail/files/firejail-0.9.70-envlimits.patch
Hank Leininger cc196a524b sys-apps/firejail: bump to 0.9.70 for security fixes; cleanup
Fix for CVE-2022-31214. Drop old version & un-tended-to live ebuild.

Signed-off-by: Hank Leininger <hlein@korelogic.com>
Bug: https://bugs.gentoo.org/850748
Package-Manager: Portage-3.0.30, Repoman-3.0.3
Closes: https://github.com/gentoo/gentoo/pull/25840
Signed-off-by: Joonas Niilola <juippis@gentoo.org>
2022-06-15 08:47:49 +03:00

13 lines
669 B
Diff

diff -urP firejail-0.9.70.orig/src/firejail/firejail.h firejail-0.9.70/src/firejail/firejail.h
--- firejail-0.9.70.orig/src/firejail/firejail.h 2022-06-08 07:42:50.000000000 -0600
+++ firejail-0.9.70/src/firejail/firejail.h 2022-06-09 13:06:04.094034022 -0600
@@ -706,7 +706,7 @@
int check_kernel_procs(void);
void run_no_sandbox(int argc, char **argv) __attribute__((noreturn));
-#define MAX_ENVS 256 // some sane maximum number of environment variables
+#define MAX_ENVS 2048 // some sane maximum number of environment variables
#define MAX_ENV_LEN (PATH_MAX + 32) // FOOBAR=SOME_PATH, only applied to Firejail's own sandboxed apps
// env.c
typedef enum {