Docs/defensive-coding-guide
2
0
Fork 0
Code Issues 3 Pull requests 1 Projects Releases Packages Wiki Activity Actions

Update Tasks-Processes.xml - Title Case and an adj. fixed

Browse source
This commit is contained in:
Mirek Jahoda 2017-10-20 11:51:48 +00:00
parent 3d48e21215
commit fa8dcdcbb9
1 changed files with 9 additions and 9 deletions
Download patch file Download diff file Expand all files Collapse all files

18
en-US/Tasks-Processes.xml
View file

@ -5,7 +5,7 @@
<title>Processes</title> <title>Processes</title>
<section id="sect-Defensive_Coding-Tasks-Processes-Creation"> <section id="sect-Defensive_Coding-Tasks-Processes-Creation">
<title>Safe process creation</title> <title>Creating Safe Processes</title>
<para> <para>
This section describes how to create new child processes in a This section describes how to create new child processes in a
safe manner. In addition to the concerns addressed below, there safe manner. In addition to the concerns addressed below, there
@ -37,7 +37,7 @@
</section> </section>
<section id="sect-Defensive_Coding-Tasks-Processes-execve"> <section id="sect-Defensive_Coding-Tasks-Processes-execve">
<title>Bypassing the shell</title> <title>Bypassing the Shell</title>
<para> <para>
Child processes should be created without involving the system Child processes should be created without involving the system
shell. shell.
@ -85,7 +85,7 @@
</section> </section>
<section id="sect-Defensive_Coding-Tasks-Processes-environ"> <section id="sect-Defensive_Coding-Tasks-Processes-environ">
<title>Specifying the process environment</title> <title>Specifying the Process Environment</title>
<para> <para>
Child processes should be created with a minimal set of Child processes should be created with a minimal set of
environment variables. This is absolutely essential if there environment variables. This is absolutely essential if there
@ -169,7 +169,7 @@
</section> </section>
<section> <section>
<title>Robust argument list processing</title> <title>Robust Argument List Processing</title>
<para> <para>
When invoking a program, it is sometimes necessary to include When invoking a program, it is sometimes necessary to include
data from untrusted sources. Such data should be checked data from untrusted sources. Such data should be checked
@ -202,7 +202,7 @@
</section> </section>
<section id="sect-Defensive_Coding-Tasks-Processes-Command_Line_Visibility"> <section id="sect-Defensive_Coding-Tasks-Processes-Command_Line_Visibility">
<title>Passing secrets to subprocesses</title> <title>Passing Secrets to Subprocesses</title>
<para> <para>
The command line (the name of the program and its argument) of The command line (the name of the program and its argument) of
a running process is traditionally available to all local a running process is traditionally available to all local
@ -237,7 +237,7 @@
</section> </section>
<section> <section>
<title>Handling child process termination</title> <title>Handling Child Process Termination</title>
<para> <para>
When child processes terminate, the parent process is signalled. When child processes terminate, the parent process is signalled.
A stub of the terminated processes (a A stub of the terminated processes (a
@ -323,7 +323,7 @@
</para> </para>
<section id="sect-Defensive_Coding-Tasks-secure_getenv"> <section id="sect-Defensive_Coding-Tasks-secure_getenv">
<title>Accessing environment variables</title> <title>Accessing Environment Variables</title>
<para> <para>
The following steps are required so that a program does not The following steps are required so that a program does not
accidentally pick up untrusted data from environment accidentally pick up untrusted data from environment
@ -443,7 +443,7 @@
</section> </section>
<section> <section>
<title>Semantics of command line arguments</title> <title>Semantics of Command-line Arguments</title>
<!-- ??? This applies in two ways, safely calling an other process <!-- ??? This applies in two ways, safely calling an other process
and support for being called safely. Also need to address and support for being called safely. Also need to address
untrusted current directory on USB sticks. --> untrusted current directory on USB sticks. -->
@ -469,7 +469,7 @@
</section> </section>
<section id="sect-Defensive_Coding-Tasks-Processes-Fork-Parallel"> <section id="sect-Defensive_Coding-Tasks-Processes-Fork-Parallel">
<title><function>fork</function> as a primitive for parallelism</title> <title><function>fork</function> as a Primitive for Parallelism</title>
<para> <para>
A call to <function>fork</function> which is not immediately A call to <function>fork</function> which is not immediately
followed by a call to <function>execve</function> (perhaps after followed by a call to <function>execve</function> (perhaps after