flatpak
flatpak copied to clipboard
run: Don't inherhit LD_PRELOAD from the host
I don't think this env var makes much sense to pass into the sandbox for similar reasons to LD_LIBRARY_PATH. Libraries from the host just aren't relevant.
Users can still pass --env=LD_PRELOAD=/foo to use this functionality.
There is a comment below that says:
If updating this list, also update the list in flatpak-run.xml.
It's easy to miss since it's in the middle of the list so perhaps should be moved on top.
For completeness, we might want to do the same for LD_AUDIT, which is like LD_PRELOAD but more so.
Users can still pass
--env=LD_PRELOAD=/footo use this functionality.
Did you test this? It would be good to know for sure that it's true.
Did you test this? It would be good to know for sure that it's true.
Yes I confirmed it works.
run: Don't inherhit…
Typo: should say inherit
Hmm, I actually hit some failures:
error: Can't open generated ld.so.cache
So I'll check this out later.
This happens on main, so it must be a badly configured build, but I'll verify everything is good before merging.
I'll verify everything is good before merging
Not merging this right now because it's still marked as draft, but the change looks good, so please re-test.