pub static RESTORED_ENV_ALLOWLIST: LazyLock<HashSet<&'static str>>Expand description
Environment variables elevated tracexec may consult after --elevate.
Keep this list limited to variables that tracexec itself reads. The complete
original environment is transferred as data, but only these keys are exposed
to elevated tracexec behavior. The tracee still receives the complete
original environment at execve(2).
TRACEXEC_DATA is passed via cmdline and thus not allowed here.
Variables only for development, like TRACEXEC_BPFCOV_OUTDIR,
are also not allowed.