From mboxrd@z Thu Jan 1 00:00:00 1970 From: =?UTF-8?Q?Cl=C3=A9ment?= Lassieur Subject: bug#31814: setuid programs are not first in PATH Date: Wed, 13 Jun 2018 17:06:57 +0200 Message-ID: <877en24tf2.fsf@lassieur.org> References: <87602mu57o.fsf@lassieur.org> <87wov2afr2.fsf@fastmail.com> Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:57161) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1fT7NW-0004mS-Sj for bug-guix@gnu.org; Wed, 13 Jun 2018 11:08:07 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1fT7NS-0006ic-G0 for bug-guix@gnu.org; Wed, 13 Jun 2018 11:08:06 -0400 Received: from debbugs.gnu.org ([208.118.235.43]:38863) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1fT7NS-0006iL-C2 for bug-guix@gnu.org; Wed, 13 Jun 2018 11:08:02 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1fT7NS-0007pV-5l for bug-guix@gnu.org; Wed, 13 Jun 2018 11:08:02 -0400 Sender: "Debbugs-submit" Resent-Message-ID: In-reply-to: <87wov2afr2.fsf@fastmail.com> List-Id: Bug reports for GNU Guix List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-guix-bounces+gcggb-bug-guix=m.gmane.org@gnu.org Sender: "bug-Guix" To: Joshua Branson Cc: 31814@debbugs.gnu.org Joshua Branson writes: > Cl=C3=A9ment Lassieur writes: > >> Hi, >> >> sourcing /etc/profile >> >> - prepends /run/setuid-programs to $PATH >> - then sources $HOME/.guix-profile/etc/profile >> >> and sourcing $HOME/.guix-profile/etc/profile >> >> - prepends $HOME/.guix-profile/bin to $PATH >> - prepends $HOME/.guix-profile/sbin to $PATH >> >> so in the end, $PATH looks like: >> >> ~/.config/guix/current/bin:~/.guix-profile/bin:~/.guix-profile/sbin:/run= /setuid-programs:... >> >> and a command like 'ping' is found in ~/.guix-profile/bin, which makes >> it unusable. > > I'm probably being really silly, but shouldn't it still work? I mean > ~/.guix-profile/bin is still in your path right? Yes, but ~/.guix-profile/bin/ping (which is the one being chosen) doesn't have the setuid flag, so it doesn't work.