1/* Environment variable to be removed for SUID programs. The names are
2 all stuffed in a single string which means they have to be terminated
3 with a '\0' explicitly. */
4#define UNSECURE_ENVVARS \
5 "GCONV_PATH\0" \
6 "GETCONF_DIR\0" \
7 "GLIBC_TUNABLES\0" \
8 "HOSTALIASES\0" \
9 "LD_AUDIT\0" \
10 "LD_BIND_NOT\0" \
11 "LD_BIND_NOW\0" \
12 "LD_DEBUG\0" \
13 "LD_DEBUG_OUTPUT\0" \
14 "LD_DYNAMIC_WEAK\0" \
15 "LD_HWCAP_MASK\0" \
16 "LD_LIBRARY_PATH\0" \
17 "LD_ORIGIN_PATH\0" \
18 "LD_PRELOAD\0" \
19 "LD_PROFILE\0" \
20 "LD_SHOW_AUXV\0" \
21 "LD_VERBOSE\0" \
22 "LD_WARN\0" \
23 "LOCALDOMAIN\0" \
24 "LOCPATH\0" \
25 "MALLOC_ARENA_MAX\0" \
26 "MALLOC_ARENA_TEST\0" \
27 "MALLOC_MMAP_MAX_\0" \
28 "MALLOC_MMAP_THRESHOLD_\0" \
29 "MALLOC_PERTURB_\0" \
30 "MALLOC_TOP_PAD_\0" \
31 "MALLOC_TRACE\0" \
32 "MALLOC_TRIM_THRESHOLD_\0" \
33 "NIS_PATH\0" \
34 "NLSPATH\0" \
35 "RESOLV_HOST_CONF\0" \
36 "RES_OPTIONS\0" \
37 "TMPDIR\0" \
38 "TZDIR\0"
39

source code of glibc/sysdeps/generic/unsecvars.h