[issue46890] venv does not create "python" link in python 3.11

Steve Dower report at bugs.python.org
Mon Mar 7 17:01:28 EST 2022


Steve Dower <steve.dower at python.org> added the comment:

> This could be problematic, adding a suitably named file outside of $PREFIX breaks the python installation.

Might be worth changing it then. I double/triple checked whether 
searching up for the zip file was the old behaviour, and it sure seemed 
to be (it wasn't on Windows). Will only be a little tweak to change, 
since both codepaths are already there.

My assumption was that any higher-level directories in that tree would 
be at least as restricted as where Python is installed, so anyone who 
could hijack it there could also have modified it closer to the actual file.

----------

_______________________________________
Python tracker <report at bugs.python.org>
<https://bugs.python.org/issue46890>
_______________________________________


More information about the Python-bugs-list mailing list