Tuesday, 18 December 2018

Re: Changing $PATH for apt installs

On Tue, Dec 04, 2018 at 09:46:25PM +0100, Julian Andres Klode wrote:
> Hi folks,
>
> I'm planning to have apt set PATH to a sane value for running
> dpkg, so that maintainer scripts are executed in a sanitized
> environment. That value will be:
>
> PATH=/usr/sbin:/usr/bin:/sbin:/bin
>
> The effect:
>
> (1) There is no /usr/local, which prevents breakage from custom perl
> or python installation
>
> (2) /snap/bin is not included either. This means that packages migrating
> to snaps will have to provide compatibility links (scripts?) in /usr
> - IIRC, lxd already does so, I'm not sure about other libraries.
>
> Together, this ensures that deb packages only talk to deb packages.

This just landed in Debian unstable, and should hit disco in the
next 24 hours or so.
--
debian developer - deb.li/jak | jak-linux.org - free software dev
ubuntu core developer i speak de, en

--
ubuntu-devel mailing list
ubuntu-devel@lists.ubuntu.com
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-devel