Re: Why is "local" insecure PATH element ?

2020-04-01 Thread Zbigniew Jędrzejewski-Szmek
On Wed, Apr 01, 2020 at 09:57:25PM +0200, Lukas Czerner wrote: > On Wed, Apr 01, 2020 at 11:26:04AM -0700, Samuel Sieb wrote: > > On 4/1/20 4:27 AM, Lukas Czerner wrote: > > > I've noticed some failures in automated tests in bodhi, specifically > > > this one: > > > > > > { > > >

Re: Why is "local" insecure PATH element ?

2020-04-01 Thread Lukas Czerner
On Wed, Apr 01, 2020 at 04:10:02PM -0400, Stephen Gallagher wrote: > On Wed, Apr 1, 2020 at 3:58 PM Lukas Czerner wrote: > > > > On Wed, Apr 01, 2020 at 11:26:04AM -0700, Samuel Sieb wrote: > > > On 4/1/20 4:27 AM, Lukas Czerner wrote: > > > > I've noticed some failures in automated tests in

Re: Why is "local" insecure PATH element ?

2020-04-01 Thread Stephen Gallagher
On Wed, Apr 1, 2020 at 3:58 PM Lukas Czerner wrote: > > On Wed, Apr 01, 2020 at 11:26:04AM -0700, Samuel Sieb wrote: > > On 4/1/20 4:27 AM, Lukas Czerner wrote: > > > I've noticed some failures in automated tests in bodhi, specifically > > > this one: > > > > > > { > > > "arch" :

Re: Why is "local" insecure PATH element ?

2020-04-01 Thread Lukas Czerner
On Wed, Apr 01, 2020 at 11:26:04AM -0700, Samuel Sieb wrote: > On 4/1/20 4:27 AM, Lukas Czerner wrote: > > I've noticed some failures in automated tests in bodhi, specifically > > this one: > > > > { > > "arch" : "x86_64", > > "code" : "SuspiciousPath", > > "context"

Re: Why is "local" insecure PATH element ?

2020-04-01 Thread Samuel Sieb
On 4/1/20 4:27 AM, Lukas Czerner wrote: I've noticed some failures in automated tests in bodhi, specifically this one: { "arch" : "x86_64", "code" : "SuspiciousPath", "context" : { "excerpt" : [

Why is "local" insecure PATH element ?

2020-04-01 Thread Lukas Czerner
Hi, I've noticed some failures in automated tests in bodhi, specifically this one: { "arch" : "x86_64", "code" : "SuspiciousPath", "context" : { "excerpt" : [ "PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin" ],