On 05/02/2018 03:30 PM, Stephen Gallagher wrote:
Hi!
I'd like to propose putting the ~/.local/bin in front of the
/usr/bin on
the PATH.
Currently /usr/bin has priority over ~/.local/bin, which
causes a [bug]
where the old system-installed executable written in Python
(from
/usr/bin) is launched, but it finds new Python sources
(installed into
$HOME) which it doesn't work with and crashes.
[bug] https://bugzilla.redhat.com/show_bug.cgi?id=1571650
I believe the current configuration breaks the intuitive
expectation
that things installed closer to the user should take
priority. That's
for example how it works with Python.
Interestingly, ubuntu and opensuse do not have ~/.local/bin
on their
PATH (though Ubuntu has ~/bin) so we can't take guidance
there.
Does anyone see a reason not to prioritize ~/.local/bin over
/usr/bin?
Yes, if a user's account is compromised (or any service
running as them), it's REALLY easy to drop faked tools into
a user-private directory and override critical system tools
(like replacing 'bash' with a keylogger).
However, if the user's account is compromised, it's just as easy to
change the definition of PATH.
_______________________________________________
devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx
|
_______________________________________________
devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx
