Re: Bug#1041362: login: remove /bin and /sbin from default $PATH
Chris Hofstaedtler <[email protected]>
| Newsgroups | gmane.linux.debian.devel.ssh |
|---|---|
| Message-ID | <Z7MPlXYUhZ1hUncP__22646.9267903425$1739789121$gmane$org@per.namespace.at> |
Control: reassign -1 login.defs Control: affects -1 openssh-server On Mon, Aug 05, 2024 at 01:46:08AM +0200, Chris Hofstaedtler wrote: > On Tue, Jul 18, 2023 at 12:04:17AM +0000, [email protected] wrote: > > Please remove /bin and /sbin from ENV_SUPATH and ENV_PATH defined in /etc/login.defs because they are no longer necessary and only increase the length of $PATH. > > I agree we should do this, but earliest in forky. Adding openssh, as the PATH set for remote logins is set by sshd. login.defs currently has: ENV_SUPATH PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin ENV_PATH PATH=/usr/local/bin:/usr/bin:/bin:/usr/local/games:/usr/games This is somewhat different from what openssh has in d/rules: SUPERUSER_PATH := /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin DEFAULT_PATH := /usr/local/bin:/usr/bin:/bin:/usr/games Looks like we should do some realignment on these values anyway. Chris