From mboxrd@z Thu Jan 1 00:00:00 1970 Path: main.gmane.org!not-for-mail From: Rob Browning Newsgroups: gmane.lisp.guile.devel Subject: Re: The load path Date: Sun, 17 Oct 2004 14:40:29 -0500 Sender: guile-devel-bounces+guile-devel=m.gmane.org@gnu.org Message-ID: <87zn2lgmky.fsf@trouble.defaultvalue.org> References: <1097949129.4178.31.camel@localhost> NNTP-Posting-Host: deer.gmane.org Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Trace: sea.gmane.org 1098042174 8187 80.91.229.6 (17 Oct 2004 19:42:54 GMT) X-Complaints-To: usenet@sea.gmane.org NNTP-Posting-Date: Sun, 17 Oct 2004 19:42:54 +0000 (UTC) Cc: guile-devel Original-X-From: guile-devel-bounces+guile-devel=m.gmane.org@gnu.org Sun Oct 17 21:42:45 2004 Return-path: Original-Received: from lists.gnu.org ([199.232.76.165]) by deer.gmane.org with esmtp (Exim 3.35 #1 (Debian)) id 1CJGvV-0007tT-00 for ; Sun, 17 Oct 2004 21:42:45 +0200 Original-Received: from localhost ([127.0.0.1] helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.33) id 1CJH2l-0001Bw-61 for guile-devel@m.gmane.org; Sun, 17 Oct 2004 15:50:15 -0400 Original-Received: from mailman by lists.gnu.org with tmda-scanned (Exim 4.33) id 1CJH2M-00010M-IA for guile-devel@gnu.org; Sun, 17 Oct 2004 15:49:50 -0400 Original-Received: from exim by lists.gnu.org with spam-scanned (Exim 4.33) id 1CJH2K-0000zl-J1 for guile-devel@gnu.org; Sun, 17 Oct 2004 15:49:48 -0400 Original-Received: from [199.232.76.173] (helo=monty-python.gnu.org) by lists.gnu.org with esmtp (Exim 4.33) id 1CJH2K-0000zK-Bi for guile-devel@gnu.org; Sun, 17 Oct 2004 15:49:48 -0400 Original-Received: from [66.93.216.237] (helo=defaultvalue.org) by monty-python.gnu.org with esmtp (Exim 4.34) id 1CJGux-0007UH-1C for guile-devel@gnu.org; Sun, 17 Oct 2004 15:42:11 -0400 Original-Received: from trouble.defaultvalue.org (omen.defaultvalue.org [192.168.1.1]) by defaultvalue.org (Postfix) with ESMTP id 65DAB3FDA; Sun, 17 Oct 2004 14:42:09 -0500 (CDT) Original-Received: by trouble.defaultvalue.org (Postfix, from userid 1000) id 35A1B410AB; Sun, 17 Oct 2004 14:40:29 -0500 (CDT) Original-To: Andy Wingo In-Reply-To: <1097949129.4178.31.camel@localhost> (Andy Wingo's message of "Sat, 16 Oct 2004 19:52:08 +0200") User-Agent: Gnus/5.1006 (Gnus v5.10.6) Emacs/21.3 (gnu/linux) X-BeenThere: guile-devel@gnu.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Developers list for Guile, the GNU extensibility library" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guile-devel-bounces+guile-devel=m.gmane.org@gnu.org Xref: main.gmane.org gmane.lisp.guile.devel:4262 X-Report-Spam: http://spam.gmane.org/gmane.lisp.guile.devel:4262 Andy Wingo writes: > First off, the load path for a guile in /usr/bin/guile doesn't > include /usr/local. I was discussing this with Rob today on IRC, and > we agreed that /usr/local should be added onto the load path for a > guile in /usr, so that local packages can be used without hacking > LOAD_PATH. I agree that it's probably a good idea, though I was a little concerned about putting things in /usr/local in root's default path. However, my concern may have been based on an incorrect assumption. I had thought that on many systems root's PATH did not include directories in /usr/local/bin by default because on those systems /usr/local was group staff, and membership in staff was not supposed to be equivalent to root (security-wise). If this is not a common presumption, then my concern is irrelevant. > Secondly, guile's load path includes ".". This is unexpected. The set of > includes should not depend on the working directory of the user. Also, > as in the case of $PATH and $LD_LIBRARY_PATH, this exposes a security > risk. The only time I can imagine this as being useful is within a > source tree, when you control the environment anyway. Yes. It's risky for all the same reasons that having . in your PATH is. The risk is a little less than it otherwise might be, since . is at the end, but it's still a risk. -- Rob Browning rlb @defaultvalue.org and @debian.org; previously @cs.utexas.edu GPG starting 2002-11-03 = 14DD 432F AE39 534D B592 F9A0 25C8 D377 8C7E 73A4 _______________________________________________ Guile-devel mailing list Guile-devel@gnu.org http://lists.gnu.org/mailman/listinfo/guile-devel