containers / containers/bubblewrap
`--clearenv` leaks environment
Open
- Dominant language
- C
- Stars
- 8.7k
- Forks
- 386
- Avg merge
- 3d 17h
- Merged PRs (30d)
- 11
Description
Hi,
You'd expect `--unshare-pid --proc /proc --clearenv` to safely hide all environment variables. However, when not using `--as-pid-1`, the environment is leaked in `/proc/1/environ`!
Not sure if this is actually relevant security wise, but I'd better hope nobody is using `--clearenv` to clear sensitive environment variables!
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.