Re: [Discuss] Debian 12 vs. WSL 1

2023-06-21 Thread grg
On Wed, Jun 21, 2023 at 11:04:23AM -0500, Derek Martin wrote: > Not really, no. In 1994--at the time that I spoke of-- ... > So again, NO, when my environment caused me no headaches in regard to > the issues Rich described, it's absolutely not because any developer > or package maintainer was look

Re: [Discuss] Program path maintenance and security (was Re: Debian 12 vs. WSL 1)

2023-06-21 Thread Rich Pieri
On Wed, 21 Jun 2023 19:26:55 -0400 Dan Ritter wrote: > If you're packaging for a particular distro, you know where they > put it. For systems that implement merged /usr you just use /usr/bin/perl. For systems with optional merged /usr then your post-install scripts will need to adjust the interp

Re: [Discuss] Program path maintenance and security (was Re: Debian 12 vs. WSL 1)

2023-06-21 Thread Dan Ritter
Bill Bogstad wrote: > I haven't noticed anyone calling out the issue of where interpreters > are installed. > > Do I put > > #!/bin/perl > or > #!/usr/bin/perl > or maybe > /opt/bin/perl If it's on your systems, you know where to find the right perl (or python3 or ruby or...) If you're packag

Re: [Discuss] Program path maintenance and security (was Re: Debian 12 vs. WSL 1)

2023-06-21 Thread Bill Bogstad
On Wed, Jun 21, 2023 at 12:36 PM Derek Martin wrote: > > On Tue, Jun 20, 2023 at 03:39:59PM -0500, Derek Martin wrote: > > My script exactly demonstrates the point I made: You can't > > compromise a script (or other program) in the manner you described > > when it takes care on its own behalf tha

Re: [Discuss] Program path maintenance and security (was Re: Debian 12 vs. WSL 1)

2023-06-21 Thread Rich Pieri
On Wed, 21 Jun 2023 11:35:08 -0500 Derek Martin wrote: > I think it's worth expanding on this just a bit. This IS good > practice, and you should do it in your shell scripts--particularly > when you need to execute system utilities but can't be sure in which > system path they will live--and you

[Discuss] Program path maintenance and security (was Re: Debian 12 vs. WSL 1)

2023-06-21 Thread Derek Martin
On Tue, Jun 20, 2023 at 03:39:59PM -0500, Derek Martin wrote: > My script exactly demonstrates the point I made: You can't > compromise a script (or other program) in the manner you described > when it takes care on its own behalf that its PATH is set up properly. I think it's worth expanding on

Re: [Discuss] Debian 12 vs. WSL 1

2023-06-21 Thread Derek Martin
On Tue, Jun 20, 2023 at 09:31:26PM -0400, grg wrote: > > So to be clear, I was talking about a time long before the merge was a > > thing, so no, it was not due to the effort of ANY developers or > > maintainers at all. > > I believe you've got this backwards. again, ongoing effort is required of