Bug#241579: wishlist: environment variables
Package: apache2-mpm-prefork
Version: 2.0.48-7
Severity: wishlist
Wondering if it'd be possible to modify the apache2 init.d script to
launch apache with an empty environment (env -i). By default it imports
the environment of the calling user, which discloses a fair bit of
information that just doesn't need to be known by apache.
-- System Information:
Debian Release: testing/unstable
APT prefers testing
APT policy: (500, 'testing')
Architecture: i386 (i686)
Kernel: Linux 2.6.3-1-686
Locale: LANG=C, LC_CTYPE=C
Versions of packages apache2-mpm-prefork depends on:
ii apache2-common 2.0.48-7 Next generation, scalable, extenda
ii libapr0 2.0.48-7 The Apache Portable Runtime
ii libc6 2.3.2.ds1-11 GNU C Library: Shared libraries an
ii libdb4.2 4.2.52-16 Berkeley v4.2 Database Libraries [
ii libexpat1 1.95.6-8 XML parsing C library - runtime li
ii libldap2 2.1.23-1 OpenLDAP libraries
ii libssl0.9.7 0.9.7d-1 SSL shared libraries
ii zlib1g 1:1.2.1-5 compression library - runtime
-- no debconf information
Reply to: