I propose to phase out #!/usr/bin/env python
in favour of #!/usr/bin/python in our python scripts. Speak now or forever hold your peace. Note that we already use the second form 182 times in non-test scripts, while we use env 63 times. The current problem that I'm solving is that osa-dispatcher, when started via /usr/bin/env, will search directories for python, which generates SELinux AVC denials like type=AVC msg=audit(1231924839.798:5971): avc: denied { search } for pid=15336 comm="python" name="root" dev=dm-0 ino=784129 scontext=root:system_r:osa_dispatcher_t:s0 tcontext=root:object_r:user_home_dir_t:s0 tclass=dir For osa-dispatcher, the change will go to diff --git a/client/tools/osad/invocation.py b/client/tools/osad/invocation.py index 001b236..25aecad 100755 --- a/client/tools/osad/invocation.py +++ b/client/tools/osad/invocation.py @@ -1,4 +1,4 @@ -#!/usr/bin/env python +#!/usr/bin/python # # Copyright (c) 2008 Red Hat, Inc. # -- Jan Pazdziora Satellite Engineering, Red Hat _______________________________________________ Spacewalk-devel mailing list Spacewalk-devel@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-devel