Last modified: 2013-11-22 19:01:41 UTC

Wikimedia Bugzilla is closed!

Wikimedia migrated from Bugzilla to Phabricator. Bug reports are handled in Wikimedia Phabricator.
This static website is read-only and for historical purposes. It is not possible to log in and except for displaying bug reports and their history, links might be broken. See T50722, the corresponding Phabricator task for complete and up-to-date bug report information.
First Last Prev Next    This bug is not in your last search results.
Bug 48722 - PATH on webservers is just "/bin" for tools
PATH on webservers is just "/bin" for tools
Status: RESOLVED WONTFIX
Product: Wikimedia Labs
Classification: Unclassified
tools (Other open bugs)
unspecified
All All
: Normal normal
: ---
Assigned To: Marc A. Pelletier
:
Depends on:
Blocks:
  Show dependency tree / graph
 
Reported: 2013-05-22 19:16 UTC by Tim Landscheidt
Modified: 2013-11-22 19:01 UTC (History)
1 user (show)

See Also:
Web browser: ---
Mobile Platform: ---
Assignee Huggle Beta Tester: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Description Tim Landscheidt 2013-05-22 19:16:26 UTC 
For example PHP scripts have a PATH setting of "/bin" (http://tools.wmflabs.org/wikilint/test.php).  This should at least include /usr/bin and /usr/local/bin, even better $HOME/bin.
Comment 1 Tim Landscheidt 2013-05-23 03:02:36 UTC 
Addendum: qsub calls basename without absolute path, and the latter resides in /usr/bin, so submitting jobs from the webserver is virtually impossible for normal users.
Comment 2 Gerrit Notification Bot 2013-05-23 03:12:40 UTC 
Related URL: https://gerrit.wikimedia.org/r/65007 (Gerrit Change I7d03609b0c901527c0dcd492ba99af64e517a13e)
Comment 3 Marc A. Pelletier 2013-11-22 19:01:41 UTC 
Except the for side effect of qsub (which was a bug, since fixed), this should be immaterial:  any tool that relies on $PATH to reach executable files is broken by definition and should use explicit paths only.

(Doing otherwise leads to subtle and hard to track errors at best, security problems at worst).
Note You need to log in before you can comment on or make changes to this bug.
First Last Prev Next    This bug is not in your last search results.

Navigation
Links