Your message dated Thu, 23 Jan 2025 19:03:19 +0100
with message-id <[email protected]>
and subject line Re: Bug#606369: bash: Put $HOME/bin to end of $PATH
has caused the Debian Bug report #606369,
regarding skel/.profile: put $HOME/bin at end of $PATH
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
606369: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=606369
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: bash
Version: 4.1-2ubuntu4
Severity: normal
Tags: patch
User: [email protected]
Usertags: origin-ubuntu natty ubuntu-patch
This was orignally reported on
https://bugs.launchpad.net/ubuntu/+source/bash/+bug/684393
>From the thread here: http://ubuntuforums.org/showthread.php?t=1634980
If you have a bin folder in yer home directory, it adds it to the path.
It currently adds ~/bin to the start of $PATH, which has been brought up
as a bit of a security issue. It should add that path to the end of the
$PATH variable, not the beginning.
The following patch was done for the ubuntu package, but bash 4.1-3 in
debian has the same skel.profile and just needs a different changelog.
*** bash_4.1-2ubuntu5.debdiff
diff -u bash-4.1/debian/skel.profile bash-4.1/debian/skel.profile
--- bash-4.1/debian/skel.profile
+++ bash-4.1/debian/skel.profile
@@ -20,3 +20,3 @@
if [ -d "$HOME/bin" ] ; then
- PATH="$HOME/bin:$PATH"
+ PATH="$PATH:$HOME/bin"
fi
diff -u bash-4.1/debian/changelog bash-4.1/debian/changelog
--- bash-4.1/debian/changelog
+++ bash-4.1/debian/changelog
@@ -1,3 +1,9 @@
+bash (4.1-2ubuntu5) natty; urgency=low
+
+ * debian/skel.profile: moved $HOME/bin to the end of $PATH, LP: #684393
+
+ -- Ferenc Czumbil (sisco311) <[email protected]> Thu, 02 Dec 2010 20:02:25
+0000
+
bash (4.1-2ubuntu4) maverick; urgency=low
* debian/skel.bashrc: add 'alert' alias, LP: #616028
-- System Information:
Debian Release: squeeze/sid
APT prefers natty-updates
APT policy: (500, 'natty-updates'), (500, 'natty-security'), (500,
'natty-backports'), (500, 'natty'), (500, 'maverick-updates'), (500,
'maverick-security'), (500, 'maverick-backports'), (500, 'maverick'), (50,
'natty-proposed'), (50, 'maverick-proposed')
Architecture: amd64 (x86_64)
Kernel: Linux 2.6.37-8-generic (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) (ignored: LC_ALL
set to en_US.UTF-8)
Shell: /bin/sh linked to /bin/dash
Versions of packages bash depends on:
ii base-files 5.0.0ubuntu26 Debian base system miscellaneous f
ii dash 0.5.5.1-7.2ubuntu1 POSIX-compliant shell
ii debianutils 3.4.2 Miscellaneous utilities specific t
ii libc6 2.12.1-0ubuntu9 Embedded GNU C Library: Shared lib
ii libncurses5 5.7+20100626-0ubuntu2 shared libraries for terminal hand
Versions of packages bash recommends:
ii bash-completion 1:1.2-3ubuntu1 programmable completion for the ba
Versions of packages bash suggests:
pn bash-doc <none> (no description available)
-- no debconf information
--- End Message ---
--- Begin Message ---
On Wed, Dec 08, 2010 at 07:40:38PM +0100, Philip Muskovac wrote:
> It currently adds ~/bin to the start of $PATH, which has been brought up
> as a bit of a security issue. It should add that path to the end of the
> $PATH variable, not the beginning.
There was a lot of commenting on why this is not a security issue
and that users can change it, if they don't want to ability to
override preexisting commands (in a technique thats called "cover
scripts").
As there is nothing left to do here, I'm closing this old bug.
--- End Message ---
