On Mon, Jul 07, 2014 at 02:23:36PM +0200, Josef Reidinger wrote: > On Mon, 7 Jul 2014 14:17:40 +0200 > Arvin Schnell <aschn...@suse.de> wrote: > > > On Mon, Jul 07, 2014 at 02:11:48PM +0200, Lukas Ocilka wrote: > > > On 7.7.2014 14:07, Josef Reidinger wrote: > > > > >> I have general question and I think answer to it should be > > >> somewhere written as documented decision. > > >> > > >> Why we use absolute path to binary? I think proper set PATH in > > >> environment should be goal and use common path. Also from security > > >> point of view it is quite useless because if PATH is attacked, then > > >> also any real root action is attacked. > > > > > Sure, I myself also prefer the shorter way, but I think it was > > > because of security. Let's ask our security expert if this is > > > really the case, or whether it has changed meanwhile. > > > > Bug https://bugzilla.novell.com/show_bug.cgi?id=794084 mentions > > some reasons. > > > > Regards, > > Arvin > > > > I see some reasons, but I worry that we need to proper fix PATH
But how, esp. if we want to make parts of YaST available as libraries (modules/gems)? >From my point of a library should work with any PATH variable. Regards, Arvin -- Arvin Schnell, <aschn...@suse.de> Senior Software Engineer, Research & Development SUSE LINUX Products GmbH, GF: Jeff Hawn, Jennifer Guild, Felix Imendörffer, HRB 16746 (AG Nürnberg) Maxfeldstraße 5 90409 Nürnberg Germany -- To unsubscribe, e-mail: yast-devel+unsubscr...@opensuse.org To contact the owner, e-mail: yast-devel+ow...@opensuse.org
