Eliminate LD_PRELOAD and other Dangerous Environment Variables

[Patrick]

@madaidan

Even if we do this, I’m not sure if there would be other ways to achieve the same thing. At the very least, the prerequisites for this feature working properly would be:

• Unprivileged user namespaces disabled.
• No setuid binaries allowing mount namespace creation.

Can be considered.

@madaidan

Unprivileged user namespaces disabled.

Would be good if you could open a new forum thread for this.

@madaidan

No setuid binaries allowing mount namespace creation.

SUID disabling feature will most likely be enabled by default one day.

• SUID Disabler and Permission Hardener
• security-misc: Enhance Miscellaneous Security Settings