[Bug libc/12678] New: POSIX.1-2008 non-compliance in sysdeps/posix/system.c: Hard-coded shell path

[Bug libc/12678] New: POSIX.1-2008 non-compliance in sysdeps/posix/system.c: Hard-coded shell path

[shea at shealevy dot com]

http://sourceware.org/bugzilla/show_bug.cgi?id=12678

           Summary: POSIX.1-2008 non-compliance in sysdeps/posix/system.c:
                    Hard-coded shell path
           Product: glibc
           Version: unspecified
            Status: NEW
          Severity: minor
          Priority: P2
         Component: libc
        AssignedTo: drepper.fsp@gmail.com
        ReportedBy: shea@shealevy.com


>From http://pubs.opengroup.org/onlinepubs/9699919799/utilities/sh.html:

"Applications should note that the standard PATH to the shell cannot be assumed
to be either /bin/sh or /usr/bin/sh, and should be determined by interrogation
of the PATH returned by getconf PATH , ensuring that the returned pathname is
an absolute pathname and not a shell built-in."

>From sysdeps/posix/system.c:

#define SHELL_PATH      "/bin/sh"       /* Path of the shell.  */

Thus any application that uses system() is violating the above section.

-- 
Configure bugmail: http://sourceware.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.

[Bug libc/12678] POSIX.1-2008 non-compliance in sysdeps/posix/system.c: Hard-coded shell path

[shea at shealevy dot com]

http://sourceware.org/bugzilla/show_bug.cgi?id=12678

Shea Levy <shea at shealevy dot com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |shea at shealevy dot com

-- 
Configure bugmail: http://sourceware.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.

[Bug libc/12678] POSIX.1-2008 non-compliance in sysdeps/posix/system.c: Hard-coded shell path

[schwab@linux-m68k.org]

http://sourceware.org/bugzilla/show_bug.cgi?id=12678

Andreas Schwab <schwab@linux-m68k.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |INVALID

--- Comment #1 from Andreas Schwab <schwab@linux-m68k.org> 2011-04-15 13:46:51 UTC ---
glibc is not an application, it is part of the system that defines the location
of the shell.

-- 
Configure bugmail: http://sourceware.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.

[Bug libc/12678] POSIX.1-2008 non-compliance in sysdeps/posix/system.c: Hard-coded shell path

[shea at shealevy dot com]

http://sourceware.org/bugzilla/show_bug.cgi?id=12678

--- Comment #2 from Shea Levy <shea at shealevy dot com> 2011-04-15 13:51:04 UTC ---
No, glibc is not an application, but it causes any application that uses
system() to assume that the path to the shell is /bin/sh rather than
interrogating PATH.

-- 
Configure bugmail: http://sourceware.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.

[Bug libc/12678] POSIX.1-2008 non-compliance in sysdeps/posix/system.c: Hard-coded shell path

[fweimer at redhat dot com]

https://sourceware.org/bugzilla/show_bug.cgi?id=12678

Florian Weimer <fweimer at redhat dot com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
              Flags|                            |security-

-- 
You are receiving this mail because:
You are on the CC list for the bug.