URL: https://github.com/freeipa/freeipa/pull/204
Title: #204: ipautil.run: Remove hardcoded environ PATH value

rcritten commented:
"""
+1 on using absolute paths.

I don't recall any cases where KRB5_TRACE was needed so is this a theoretical 
use case or an actual one?

Yes, LD_PRELOAD or PYTHONPATH can be tweaked but this just proves my point: the 
environment is untrustworthy.
"""

See the full comment at 
https://github.com/freeipa/freeipa/pull/204#issuecomment-257867492
-- 
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

Reply via email to