Only use environment variables if uid and gid are the same as euid and egid.
This is part of a large change submitted by Markus Friedl <markus@openbsd.org>
This commit is contained in:
parent
de02ec2767
commit
f28e8bd300
1 changed files with 2 additions and 1 deletions
|
@ -267,7 +267,8 @@ bad:
|
|||
goto end;
|
||||
}
|
||||
|
||||
if (cipher == NULL) cipher=getenv("SSL_CIPHER");
|
||||
if (cipher == NULL && OPENSSL_issetugid() == 0)
|
||||
cipher=getenv("SSL_CIPHER");
|
||||
|
||||
SSL_load_error_strings();
|
||||
OpenSSL_add_ssl_algorithms();
|
||||
|
|
Loading…
Reference in a new issue