Bug 459336

Summary: Alliance incorrectly mungs your path and adds the cwd to the path
Product: [Fedora] Fedora Reporter: Bruno Wolff III <bruno>
Component: allianceAssignee: Chitlesh GOORAH <chitlesh>
Status: CLOSED NEXTRELEASE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: medium Docs Contact:
Priority: medium    
Version: 9CC: chitlesh, thibault.north
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2008-09-16 23:22:36 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
Modified alc_env.csh
none
Modified alc_env.sh none

Description Bruno Wolff III 2008-08-16 19:48:16 UTC
Description of problem:
If you install alliance, profile.d/alc_env.csh gets created and in it it modifies your path using:
setenv PATH "${PATH}:${ALLIANCE_TOP}/bin:"
This ends up putting in a :: into your path.
This is a minor security issue as it is easy to run a program unexpectedly when the current working directory is being searched.
profile.d/alc_env.sh also has a similar problem.

Version-Release number of selected component (if applicable):
alliance-5.0-16.20070718snap.fc9.x86_64

How reproducible:
100%

Steps to Reproduce:
1. Install alliance
2. login again
3. echo $PATH
  
Actual results:
Path with :: in it

Expected results:
Path without :: in it

Additional info:

Comment 1 Bruno Wolff III 2008-09-11 13:08:53 UTC
Created attachment 316432 [details]
Modified alc_env.csh

This is a modified rawhide version of alc_env.csh that doesn't add the current working directory to the path. I also tweaked the manpath to include the defaults in the case that manpath wasn't already set.

Comment 2 Bruno Wolff III 2008-09-11 13:12:25 UTC
Created attachment 316433 [details]
Modified alc_env.sh

This is a similarly changed alc_env.sh.

Comment 3 Fedora Update System 2008-09-15 21:11:43 UTC
alliance-5.0-21.20070718snap.fc9 has been submitted as an update for Fedora 9.
http://admin.fedoraproject.org/updates/alliance-5.0-21.20070718snap.fc9

Comment 4 Fedora Update System 2008-09-15 21:11:48 UTC
alliance-5.0-21.20070718snap.fc8 has been submitted as an update for Fedora 8.
http://admin.fedoraproject.org/updates/alliance-5.0-21.20070718snap.fc8

Comment 5 Fedora Update System 2008-09-16 23:22:31 UTC
alliance-5.0-21.20070718snap.fc8 has been pushed to the Fedora 8 stable repository.  If problems still persist, please make note of it in this bug report.

Comment 6 Fedora Update System 2008-09-16 23:23:56 UTC
alliance-5.0-21.20070718snap.fc9 has been pushed to the Fedora 9 stable repository.  If problems still persist, please make note of it in this bug report.