Hi folks,

I'm planning to have apt set PATH to a sane value for running
dpkg, so that maintainer scripts are executed in a sanitized
environment. That value will be:

        PATH=/usr/sbin:/usr/bin:/sbin:/bin

The effect:

(1) There is no /usr/local, which prevents breakage from custom perl
    or python installation

(2) /snap/bin is not included either. This means that packages migrating
    to snaps will have to provide compatibility links (scripts?) in /usr
    - IIRC, lxd already does so, I'm not sure about other libraries.

Together, this ensures that deb packages only talk to deb packages.

Thanks,
Julian

-- 
debian developer - deb.li/jak | jak-linux.org - free software dev 
ubuntu core developer i speak de, en

-- 
ubuntu-devel mailing list
ubuntu-devel@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-devel

Reply via email to