From e684ef07f03dd563310788c90b3cdb00bac551eb Mon Sep 17 00:00:00 2001 From: Matthew Barnes <mbarnes@redhat.com> Date: Wed, 16 Sep 2015 14:14:43 -0400 Subject: [PATCH] libcontainer: Set PATH when using execvp() Set PATH to something sane for a chroot'ed environment rather than relying on the user's PATH value. --- glnx-libcontainer.c | 3 +++ 1 file changed, 3 insertions(+) diff --git a/glnx-libcontainer.c b/glnx-libcontainer.c index b4e93e7f0..8c0f34071 100644 --- a/glnx-libcontainer.c +++ b/glnx-libcontainer.c @@ -281,6 +281,9 @@ glnx_libcontainer_run_chroot_private (const char *dest, } else { + /* Set PATH to something sane. */ + setenv ("PATH", "/usr/sbin:/usr/bin", 1); + if (execvp (binary, argv) != 0) _perror_fatal ("execvp: "); } -- GitLab