X-Recipient: archive-cygwin AT delorie DOT com
DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:mime-version:in-reply-to:references:from:date
	:message-id:subject:to:content-type; q=dns; s=default; b=k0VJzc/
	dPxPHbqf1cJb1z7n/kZJiyHV44geOA6YNC+Mk4UiViHH2SO7wnCKT8zAEo5EIPpK
	ycYfySYo47LK9Qvz9CKEz1qwC8hnMZ9W3CF3j2hMzMX170BMJ+YEpr9FYXVxfJQB
	z6x73orQ/UrQ/HqfwU6H8iB3O9XWcpX810H4=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:mime-version:in-reply-to:references:from:date
	:message-id:subject:to:content-type; s=default; bh=JY8pUCAAojovc
	sYVL0EyPx/ID9M=; b=xC/52TT2JyZ9zAZmzc+qne1AJuJtDj60zd9tXKxjiiLDo
	pNTmeMFqFHVPuxF84BVk1Qt49VsuyQGTM9ecPNCiF/rcWegCbmpXwFc3/4dBAcYP
	HlI5N1Uc2BWYBDSGxjPjZPSQLfUEMLFpfts0p1k3hR6KIPuumew8hn8K793Mak=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Authentication-Results: sourceware.org; auth=none
X-Virus-Found: No
X-Spam-SWARE-Status: No, score=-0.3 required=5.0 tests=AWL,BAYES_00,FREEMAIL_FROM,RCVD_IN_DNSWL_LOW,SPF_PASS autolearn=no version=3.3.2
X-HELO: mail-pa0-f53.google.com
X-Received: by 10.70.25.132 with SMTP id c4mr15979105pdg.107.1410578486962; Fri, 12 Sep 2014 20:21:26 -0700 (PDT)
MIME-Version: 1.0
In-Reply-To: <54137295.4070304@redhat.com>
References: <5413271B DOT 1010109 AT t-online DOT de> <54134A83 DOT 80107 AT redhat DOT com> <54135451 DOT 3060902 AT t-online DOT de> <54137295 DOT 4070304 AT redhat DOT com>
From: David Boyce <dsb AT boyski DOT com>
Date: Fri, 12 Sep 2014 23:21:06 -0400
Message-ID: <CACUHbYPkcZ3t6wnrw_4hOEb3qWco33q1d9tDGfA7mYz3Qp982Q@mail.gmail.com>
Subject: Re: Cannot exec() program outside of /bin if PATH is unset
To: cygwin AT cygwin DOT com
Content-Type: text/plain; charset=UTF-8
X-IsSubscribed: yes

On Fri, Sep 12, 2014 at 6:24 PM, Eric Blake <eblake AT redhat DOT com> wrote:
> On 09/12/2014 02:15 PM, Christian Franke wrote:
>>>>    unsetenv("PATH");
>>> This is undefined behavior, per POSIX.  POSIX recommends that you always
>>> leave PATH defined to at least a bare minimum of the results of
>>> confstr(_CS_PATH, ...); it also states that implementations are free to
>>> do what they want (in this case, crash) if you don't follow the
>>> recommendation:
>>>
>>> http://pubs.opengroup.org/onlinepubs/9699919799/basedefs/V1_chap08.html
>>> "If PATH is unset or is set to null, the path search is
>>> implementation-defined."
>>
>> There is no POSIX PATH search needed in my testcase:
>>   execl("/usr/sbin/alternatives", ...)
>
> PATH may not be needed for execl() to find the binary it will be
> executing, but it IS required to be set in the environment to the bare
> minimum of confstr(_CS_PATH) for that binary to have a chance of
> executing in a well-defined setup.

Eric,

I think your interpretation is wrong. The line you quote from POSIX
refers to a "path search" but there is no path search happening here.
The concept of path search is implicitly defined by the first line in
your citation:

"PATH: This variable shall represent the sequence of path prefixes
that certain functions and utilities apply in searching for an
executable file known only by a filename."

Notice the way this sentence ends. The argument to execl() is a full
path, not "only a filename", thus no PATH search is involved. I agree
that unsetting PATH is not ideal practice but I think it's perfectly
well defined by POSIX.

David

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple