freeipa

#6449 Unify/fix work with Env variables in IPA
Opened by mbasti. Modified

Open
Close Issue

Currently env variables are handled differently in client and in server modules, we should unify and document how env variables are handled in IPA.

Following opinions were collected offline:

  • copy os.environ and don't change it
  • blacklist env variables
  • whitelist env variables
  • keep list of overrides ('PATH': '/usr/bin:/usr/sbin')

Additional info:

  • https://github.com/freeipa/freeipa/pull/204
  • https://www.securecoding.cert.org/confluence/display/c/ENV03-C.+Sanitize+the+environment+when+invoking+external+programs

Metadata Update from @mbasti:
- Issue assigned to someone
- Issue set to the milestone: Future Releases
Metadata
None
None
None
Normal
defect
IPA
0
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.