search

canonical / rockcraft

Tool to create OCI Images using the language from Snapcraft and Charmcraft.
GNU General Public License v3.0
36 stars 44 forks source link

Improve detection/setting of the PATH environment variable #729

Open tigarmo opened 4 weeks ago

tigarmo commented 4 weeks ago

What needs to get done

The current code that prevents empty PATH vars only activates on bare-based rocks; as Cris points out we could improve this to cover any case where the PATH is empty to protect ourselves in the case of future changes or new bases.

Why it needs to get done

The empty PATH is a security vulnerability; generalizing the detection and handling of this case improves the robustness of the code.

syncronize-issues-to-jira[bot] commented 4 weeks ago

Thank you for reporting us your feedback!

The internal ticket has been created: https://warthogs.atlassian.net/browse/CRAFT-3558.

This message was autogenerated