I propose to phase out

        #!/usr/bin/env python

in favour of

        #!/usr/bin/python

in our python scripts.

Speak now or forever hold your peace.

Note that we already use the second form 182 times in non-test
scripts, while we use env 63 times.

The current problem that I'm solving is that osa-dispatcher, when
started via /usr/bin/env, will search directories for python, which
generates SELinux AVC denials like

type=AVC msg=audit(1231924839.798:5971): avc:  denied  { search } for  
pid=15336 comm="python" name="root" dev=dm-0 ino=784129 
scontext=root:system_r:osa_dispatcher_t:s0 
tcontext=root:object_r:user_home_dir_t:s0 tclass=dir

For osa-dispatcher, the change will go to

diff --git a/client/tools/osad/invocation.py b/client/tools/osad/invocation.py
index 001b236..25aecad 100755
--- a/client/tools/osad/invocation.py
+++ b/client/tools/osad/invocation.py
@@ -1,4 +1,4 @@
-#!/usr/bin/env python
+#!/usr/bin/python
 #
 # Copyright (c) 2008 Red Hat, Inc.
 #

-- 
Jan Pazdziora
Satellite Engineering, Red Hat

_______________________________________________
Spacewalk-devel mailing list
Spacewalk-devel@redhat.com
https://www.redhat.com/mailman/listinfo/spacewalk-devel

Reply via email to