Currently, 3 tests are FAILing based on the environment going into the test:

FAIL: execdir-one, /home/eblake/findutils/find/testsuite/../find: The current 
directory is included in the PATH environment variable, which is insecure in 
combination with the -execdir action of find.  Please remove the current 
directory from your $PATH (that is, remove "." or leading or trailing colons)
Running /home/eblake/findutils/find/testsuite/find.gnu/execdir-root-only.exp ...
FAIL: execdir-root-only, /home/eblake/findutils/find/testsuite/../find: The 
current directory is included in the PATH environment variable, which is 
insecure in combination with the -execdir action of find.  Please remove the 
current directory from your $PATH (that is, remove "." or leading or trailing 
colons)

FAIL: sv-bug-12230, /home/eblake/findutils/find/testsuite/../find: The current 
directory is included in the PATH environment variable, which is insecure in 
combination with the -execdir action of find.  Please remove the current 
directory from your $PATH (that is, remove "." or leading or trailing colons)

Could these tests be updated to either set their own PATH before calling
find, or to SKIP instead of FAIL if PATH includes "."?

--
Eric Blake


_______________________________________________
Bug-findutils mailing list
Bug-findutils@gnu.org
http://lists.gnu.org/mailman/listinfo/bug-findutils

Reply via email to