Re: Why is "local" insecure PATH element ?

2020-04-01 Thread Lukas Czerner
On Wed, Apr 01, 2020 at 04:10:02PM -0400, Stephen Gallagher wrote: > On Wed, Apr 1, 2020 at 3:58 PM Lukas Czerner wrote: > > > > On Wed, Apr 01, 2020 at 11:26:04AM -0700, Samuel Sieb wrote: > > > On 4/1/20 4:27 AM, Lukas Czerner wrote: > > > > I've no

Re: Why is "local" insecure PATH element ?

2020-04-01 Thread Lukas Czerner
On Wed, Apr 01, 2020 at 11:26:04AM -0700, Samuel Sieb wrote: > On 4/1/20 4:27 AM, Lukas Czerner wrote: > > I've noticed some failures in automated tests in bodhi, specifically > > this one: > > > > { > > "arch" : "x86_64", &

Why is "local" insecure PATH element ?

2020-04-01 Thread Lukas Czerner
Hi, I've noticed some failures in automated tests in bodhi, specifically this one: { "arch" : "x86_64", "code" : "SuspiciousPath", "context" : { "excerpt" : [ "PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin" ],