[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Chicken-hackers] Regarding C5 patch for egg-install improvements
From: |
Peter Bex |
Subject: |
Re: [Chicken-hackers] Regarding C5 patch for egg-install improvements |
Date: |
Fri, 24 Nov 2017 21:16:59 +0100 |
User-agent: |
NeoMutt/20170113 (1.7.2) |
On Sun, Nov 19, 2017 at 03:01:13PM +0100, address@hidden wrote:
> Hi!
>
> That was: "Improve handling of "custom-build" egg property"
>
> Can someone look at this patch, please? I attach it here once more...
Hi! I don't understand half of this patch, but it sounds dangerous to
add "." to $PATH. Any binary you call will be invoked from the current
directory, which might be writable to ill-meaning people.
Cheers,
Peter
signature.asc
Description: PGP signature