[Python-ideas] Security: remove "." from sys.path?

[Stephan Houben]

Would it not be a job for setuptools?
Setuptools creates the scripts.

Stephan


Op 5 jun. 2017 12:12 schreef "Oleg Broytman" <phd at phdru.name>:

On Mon, Jun 05, 2017 at 12:06:45PM +0200, Stephan Houben <
stephanh42 at gmail.com> wrote:
> What about doing it on the systems which *do* support it?
> (Which probably covers 99% of the installed base...)

   That's the job of Linux distribution packagers, not Python Core
developers.

> Stephan
>
> Op 5 jun. 2017 11:59 schreef "Greg Ewing" <greg.ewing at canterbury.ac.nz>:
>
> > Stephan Houben wrote:
> >
> >> What about just adding the -I (isolated mode) flag to the #! line of
> >> installed scripts?
> >>
> >
> > Not all unix systems support passing extra arguments on a #! line.

Oleg.
--
     Oleg Broytman            http://phdru.name/            phd at phdru.name
           Programmers don't die, they just GOSUB without RETURN.
_______________________________________________
Python-ideas mailing list
Python-ideas at python.org
https://mail.python.org/mailman/listinfo/python-ideas
Code of Conduct: http://python.org/psf/codeofconduct/
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.python.org/pipermail/python-ideas/attachments/20170605/3839d3a2/attachment.html>