https://bugzilla.redhat.com/show_bug.cgi?id=1070171



--- Comment #3 from Michael Schwendt <bugs.mich...@gmx.net> ---
There are mixed feelings about /usr/bin/env.

/usr/bin/env as the dependency is less correct than a strict dependency on
/usr/bin/bash (being the bash provided by Fedora). And if someone puts "bash"
in a customised $PATH before /usr/bin, this may break the program and/or even
make it insecure in case it's a vulnerable old bash.

This also affects other script interpreters, see e.g.
http://fedoraproject.org/wiki/Features/SystemPythonExecutablesUseSystemPython

An old attempt at prohibiting /usr/bin/env in shebang:
https://fedoraproject.org/wiki/Script_Interpreters_%28draft%29

-- 
You are receiving this mail because:
You are on the CC list for the bug.
You are always notified about changes to this product and component
_______________________________________________
package-review mailing list
package-review@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-review

Reply via email to