On Thu, May 15, 2014 at 11:10 AM, Chris Marshall <devel.chm...@gmail.com> wrote:
> Not familiar with MSI details but I hope any changes
> won't be a problem for SPP which is useful because
> it *doesn't* require special permissions---just enough
> to create the folder...
This has nothing to do with MSI, but with putting a directory on the
PATH to which the user has write access. Essentially all scripting
languages do this to allow the user to install additional modules
easily, but security companies like to put out alerts about this...
It is not a new issue; here is the ActiveState position about the same
issue with ActivePerl:
TL;DR: The default is more convenient for most users; it is trivial
for users to apply more restrictive ACLs if they are bothered about