Skip to content

Do not expose certain internal ENV variables to processes#59

Merged
baschny merged 1 commit intomasterfrom
security
Aug 8, 2025
Merged

Do not expose certain internal ENV variables to processes#59
baschny merged 1 commit intomasterfrom
security

Conversation

@baschny
Copy link
Member

@baschny baschny commented Aug 8, 2025

Variables which are using in the bootstrapping and write some configuration files are removed before starting SSH server or the PHP-FPM process.

Neither in SSH nor in PHP-FPM we need to see these configuration variables (like SSL_KEY or SSL_CRT etc).

Neither in SSH nor in PHP-FPM we need to see these configuration variables.
@baschny baschny merged commit 3dae94a into master Aug 8, 2025
8 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant