Bug#289983: PATH environment variable is set to '/bin:/usr/bin' even innon-tainted mode
Gunnar Wolf
Gunnar Wolf <gwolf@gwolf.org>, 289983@bugs.debian.org
Wed, 02 Mar 2005 16:41:25 -0600
Hi,
This message is in answer to bug #289983, please read it [1] for
background information.
I am Cc:ing the Debian Perl list, as I am interested in other opinions
about this.
I do not think the current behavior should be seen as a bug - This
module is set to specify its working path, and I'd like to leave it in
place. However, I agree, it should _not_ mess with your environment -
Instead of your patch (which does not really solve the situation, in a
tainted environment you would end up exactly the same way you are
now), I'd rather use this:
--- lib/MIME/Lite.pm 2004-12-17 09:41:27.582131640 -0600
+++ /tmp/Lite.pm 2005-03-02 16:41:20.708054824 -0600
@@ -334,6 +334,8 @@
$VERSION
);
+local %ENV = %ENV;
+
$ENV{PATH} = '/bin:/usr/bin';
#==============================
Do you agree? Does somebody disagree or have a better idea?
Thanks,
[1] http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=289983
--
Gunnar Wolf - gwolf@gwolf.org - (+52-55)1451-2244 / 5554-9450
PGP key 1024D/8BB527AF 2001-10-23
Fingerprint: 0C79 D2D1 2C4E 9CE4 5973 F800 D80E F35A 8BB5 27AF