I would argue that it is not appropriate to add random things with
common names like a link to "start".  I'm sure my personal start program
predates this link.

I -am- using sudo.  Roots path is  not sanitized.  Sudo is the primary
method of achieving root on Ubuntu since root doesnt ordinarily have a
password.

 I -am- careful about my path, that's why I'm filing this bug about this
particular piece of path pollution.  You can't just randomly open up
holes in my environment like this.  Dovecot breaks, as shown, and you
open up a security hole.

The fix here is trivial.  Why do you need to break Dovecot and punch a
hole in my security?  What's the benefit in doing so?

** Changed in: dovecot (Ubuntu)
       Status: Invalid => New

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to dovecot in Ubuntu.
https://bugs.launchpad.net/bugs/900496

Title:
  dovecot-core installation fails because "start" is used from PATH

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dovecot/+bug/900496/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

Reply via email to