Bug#289983: PATH environment variable is set to '/bin:/usr/bin' even innon-tainted mode

[Gunnar Wolf]

Hi,

This message is in answer to bug #289983, please read it [1] for
background information. 

I am Cc:ing the Debian Perl list, as I am interested in other opinions
about this.

I do not think the current behavior should be seen as a bug - This
module is set to specify its working path, and I'd like to leave it in
place. However, I agree, it should _not_ mess  with your environment -
Instead of your patch (which does not really solve the situation, in a
tainted environment you would end up exactly the same way you are
now), I'd rather use this:

--- lib/MIME/Lite.pm    2004-12-17 09:41:27.582131640 -0600
+++ /tmp/Lite.pm        2005-03-02 16:41:20.708054824 -0600
@@ -334,6 +334,8 @@
             $VERSION
             );
 
+local %ENV = %ENV;
+
 $ENV{PATH} = '/bin:/usr/bin';
 
 #==============================

Do you agree? Does somebody disagree or have a better idea?

Thanks,

[1] http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=289983

-- 
Gunnar Wolf - gwolf@gwolf.org - (+52-55)1451-2244 / 5554-9450
PGP key 1024D/8BB527AF 2001-10-23
Fingerprint: 0C79 D2D1 2C4E 9CE4 5973  F800 D80E F35A 8BB5 27AF