Research Update Enhanced src/linux-hardening/linux-basics/li...

[carlospolop]

🤖 Automated Content Update

This PR was automatically generated by the HackTricks News Bot based on a technical blog post.

📝 Source Information

• Blog URL:
• Blog Title: Research Update Enhanced src/linux-hardening/linux-basics/linux-environment-variables.md
• Suggested Section: Research

🎯 Content Summary

Research Update for src/linux-hardening/linux-basics/linux-environment-variables.md

This PR contains automated research updates including:

• Latest security vulnerabilities and attack vectors
• Updated techniques and tools
• Enhanced explanations and examples
• Additional references and resources

Generated by: HackTricks Research Agent
Timestamp: 2026-07-23 03...

🔧 Technical Details

Research update for HackTricks content

🤖 Agent Actions

Updated /tmp/hacktricks_update_ooy_i1cq/repo/src/linux-hardening/linux-basics/linux-environment-variables.md.

What I added/changed:

• Expanded the Bash section with the privileged-wrapper caveat where setuid()/setgid() can make Bash trust BASH_ENV/ENV again.
• Added a recent real-world needrestart example to the Python section and a new RUBYLIB & RUBYOPT section, focusing on how attacker-controlled interpreter env vars became root code execution primitives.
• Added a new NODE_OPTIONS section with a practical preload example and an internal link to the Node prototype-pollution page.
• Added a new pager/editor abuse section covering PAGER, MANPAGER, GIT_PAGER, GIT_EDITOR, LESSOPEN, and env-only Git config injection via GIT_CONFIG_COUNT.
• Added 2 new references at the end of the page.

Verification:

• Checked the internal relative link resolves correctly.
• Ran git diff --check cleanly.
• mdbook build could not be run because mdbook is not installed in this environment.

Research/source URLs used:

https://www.qualys.com/2024/11/19/needrestart/needrestart.txt
https://ubuntu.com/blog/needrestart-local-privilege-escalation
https://nodejs.org/api/cli.html
https://docs.python.org/3/using/cmdline.html
https://git-scm.com/docs/git-config
https://git-scm.com/docs/git-var
https://man7.org/linux/man-pages/man1/less.1.html
https://man7.org/linux/man-pages/man1/man.1.html
https://www.gnu.org/software/bash/manual/html_node/Bash-Startup-Files.html
https://ftp.gnu.org/old-gnu/Manuals/bash/html_chapter/bashref_4.html
https://www.thezdi.com/blog/2023/4/5/bash-privileged-mode-vulnerabilities-in-parallels-desktop-and-cdpath-handling-in-macos
https://securitylab.github.com/advisories/GHSL-2024-294_Azure-cli/

---

This PR was automatically created by the HackTricks Feed Bot. Please review the changes carefully before merging.

[carlospolop]

🔗 Additional Context

Original Blog Post:

Content Categories: Based on the analysis, this content was categorized under "Research".

Repository Maintenance:

• MD Files Formatting: 990 files processed

Review Notes:

• This content was automatically processed and may require human review for accuracy
• Check that the placement within the repository structure is appropriate
• Verify that all technical details are correct and up-to-date
• All .md files have been checked for proper formatting (headers, includes, etc.)

Bot Version: HackTricks News Bot v1.0