From ed799cffb3a685f77ed130b3f0d143aa07c7759e Mon Sep 17 00:00:00 2001 From: Hyotaek Shim Date: Fri, 19 Apr 2019 11:12:35 +0900 Subject: [PATCH] Set PATH env explicitly for better security Change-Id: If9f558321e170d9653df6715047949dcbf82900d Signed-off-by: Hyotaek Shim --- policychecker/check.in | 1 + policychecker/get_privileges.in | 3 ++- 2 files changed, 3 insertions(+), 1 deletion(-) diff --git a/policychecker/check.in b/policychecker/check.in index fd3af57..5b64e2b 100755 --- a/policychecker/check.in +++ b/policychecker/check.in @@ -1,4 +1,5 @@ #!/bin/sh +PATH="/usr/bin:/bin:/usr/sbin:/sbin" set -e diff --git a/policychecker/get_privileges.in b/policychecker/get_privileges.in index e7f69e2..8516abd 100755 --- a/policychecker/get_privileges.in +++ b/policychecker/get_privileges.in @@ -1,8 +1,9 @@ #!/bin/sh +PATH="/usr/bin:/bin:/usr/sbin:/sbin" + # This script extracts and lists privileges from all D-Bus conf files in current directory cmd="xsltproc --nonet --novalid " - privileges="" for i in *.conf -- 2.34.1