git/list[1] front-page[2] threads[3] people[4] search[5] about
 

Re: [PATCH] Set up argv0_path correctly, even when argv[0] is just the basename

From
Johannes Schindelin <johannes.schindelin@gmx.de>
Date
Jul 26, 2008, 15:35 UTC
Message-ID
<alpine.DEB.1.00.0807261732500.26810@eeepc-johanness>
In-Reply-To
<488B409D.40709@keyaccess.nl>
Hi,
On Sat, 26 Jul 2008, Rene Herman wrote:
> Adding to the PATH is generally not disallowed by user level security. 
> Replacing the GIT binary generally is.

Prepending to the PATH is generally not disallowed either. And that's just as good as replacing the Git binary.

This issue is totally independent of Git. And it is totally bogus to think about the complicated issues when the "weakest link of the chain" is much easier to exploit.

Hth, Dscho

Previous: Rene HermanNext: Rene Herman
Message 8 of 21 in “Modify mingw_main() workaround to avoid link errors”
  1. Modify mingw_main() workaround to avoid link errorsSteffen Prohaska, Jul 26, 2008
  2. Johannes SchindelinJul 26, 2008
  3. Steffen ProhaskaJul 26, 2008
  4. Set up argv0_path correctly, even when argv[0] is just the basenameJohannes Schindelin, Jul 26, 2008
  5. Rene HermanJul 26, 2008
  6. Johannes SchindelinJul 26, 2008
  7. Rene HermanJul 26, 2008
  8. Johannes SchindelinJul 26, 2008
  9. Rene HermanJul 26, 2008
  10. Junio C HamanoJul 26, 2008
  11. Johannes SchindelinJul 26, 2008
  12. Jan HudecAug 3, 2008
  13. Junio C HamanoAug 3, 2008
  14. Johannes SixtJul 26, 2008
  15. Steffen ProhaskaJul 26, 2008
  16. Johannes SixtJul 27, 2008
  17. Steffen ProhaskaJul 29, 2008
  18. Johannes SixtJul 29, 2008
  19. Steffen ProhaskaJul 29, 2008
  20. Johannes SixtAug 3, 2008
  21. Junio C HamanoAug 3, 2008

Read the whole thread, see it on lore, or plain text.

$ cat FOOTERMessages come from the public archive at lore.kernel.org/git, fetched every hour. The front page is chosen and written each morning by an AI editor and can be wrong; the threads themselves are the record. About and API. For agents: an MCP server at https://gitlist.dev/mcp, and any thread, story or person page as Markdown by adding .md to its URL (or sending Accept: text/markdown). Details in /llms.txt.