/* Extra security for SUID binaries.  Remove all dangerous environment

     variables.  */

  if (__builtin_expect (INTUSE(__libc_enable_secure), 0))

    {

      static const char unsecure_envvars[] =

#ifdef EXTRA_UNSECURE_ENVVARS

	EXTRA_UNSECURE_ENVVARS

#endif

	UNSECURE_ENVVARS;

      const char *nextp;

      nextp = unsecure_envvars;

      do

	{

	  unsetenv (nextp);

	  /* We could use rawmemchr but this need not be fast.  */

	  nextp = (char *) (strchr) (nextp, '\0') + 1;

	}

      while (*nextp != '\0');

      if (__access ("/etc/suid-debug", F_OK) != 0)

        {

	  unsetenv ("MALLOC_CHECK_");

	  GLRO(dl_debug_mask) = 0;

        }

      if (mode != normal)

	_exit (5);

    }

  /* If we have to run the dynamic linker in debugging mode and the

     LD_DEBUG_OUTPUT environment variable is given, we write the debug

     messages to this file.  */

  else if (any_debug && debug_output != NULL)

    {

#ifdef O_NOFOLLOW

      const int flags = O_WRONLY | O_APPEND | O_CREAT | O_NOFOLLOW;

#else

      const int flags = O_WRONLY | O_APPEND | O_CREAT;

#endif

      size_t name_len = strlen (debug_output);

      char buf[name_len + 12];

      char *startp;

      buf[name_len + 11] = '\0';

      startp = _itoa (__getpid (), &buf[name_len + 11], 10, 0);

      *--startp = '.';

      startp = memcpy (startp - name_len, debug_output, name_len);

      GLRO(dl_debug_fd) = __open (startp, flags, DEFFILEMODE);

      if (GLRO(dl_debug_fd) == -1)

	/* We use standard output if opening the file failed.  */

	GLRO(dl_debug_fd) = STDOUT_FILENO;

    }