Martin Costabel wrote:
> Benjamin Reed wrote:
>> -----BEGIN PGP SIGNED MESSAGE-----
>> Hash: SHA1
>>
>> Mark E. Perkins wrote:
>>
>>> If I comment out the 'Defaults' line noted above, then 'sudo make test'
>>> in
>>> the fink-0.8.1-full directory completes w/o error. Does the Fink
>>> installation script set PERL5LIB somewhere (e.g., to get
>>> Fink/Services.pm)?
>>
>> So it seems to me, if your desire is to follow this security advisory,
>> then you should choose to let fink "su" to root instead of using "sudo",
>> when the bootstrap proccess asks you. Setting PERL5LIB is a rather
>> important part of what fink does to avoid messing with your system
>> itself, I don't know that there's another good way to do it.
>>
>> We could certainly make it so fink does 'use lib' to find it's own
>> stuff, but it's silly to patch every perl package in fink to add
>> /sw/lib/perl5 to the include path internally... That's what PERL5LIB is
>> for...
>
> I have just written to fink-core about this, because I get that vague
> feeling that this could be one of those little things that will hit us
> in the face when 10.5 comes out...
>
> --
> Martin
>
>
Indeed. Maybe I didn't make what I think was the most important quite as
clearly as I intended, namely:
> Also note that sudo v1.6.8p12 and later implement this environment
> stripping
> as part of its normal behavior. Apple's sudo isn't there yet, but it will
> be
> sooner or later.
By "normal behavior" I mean that it's implemented in the code and not via
the workaround in sudoers:
<http://www.sudo.ws/cgi-bin/cvsweb/sudo/env.c>
Mark
-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys -- and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Fink-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/fink-users
