Hello, those who follow Perl 5 Porters know that Perl 5.26.0 will be possible to be built without '.' in the default @INC path <http://search.cpan.org/~abigail/perl-5.25.9/pod/perl5257delta.pod#%27.%27_and_@INC> and that being it default 5.28.0 behavior is the current plan. For security reasons, I'd like to configure perl this way as soon as possible. That means perl-5.26.0 in Fedora 27. Removing dot from @INC will affect many CPAN distributions (last estimate was 3000). Reportedly, there will be applied some mitigations to CPAN clients and Test::Harness to ease the transition. But you can already see distributions applying a fix now, like inc::Module::Install users: --- Module-Install-CheckLib-0.10/Makefile.PL +++ Module-Install-CheckLib-0.12/Makefile.PL @@ -1,3 +1,4 @@ +use if ! ( grep { $_ eq '.' } @INC ), qw[lib .]; use strict; use inc::Module::Install; The exact fix varies, somebody injects the dot only when needed (like the example above), somebody injects the dot unconditionally, somebody loads modules by absolute paths based on FindBin output. But the main point of this message is my recommendation to count with this change when packaging and not to forget to build-require perl(lib) in cases similar to the quoted one. -- Petr
Attachment:
signature.asc
Description: PGP signature
_______________________________________________ perl-devel mailing list -- perl-devel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to perl-devel-leave@xxxxxxxxxxxxxxxxxxxxxxx
