Skip to content

The /etc/paths.d/ directory and the dotnet-cli-tools file are global for all users. Writing the full path of a specific user in this file should not be done. #35417

Closed
@b4ux1t3

Description

@b4ux1t3
          The `/etc/paths.d/` directory and the `dotnet-cli-tools` file are global for all users. Writing the full path of a specific user in this file should not be done.

Originally posted by @jrdodds in #35411 (comment)

I'm trying to understand the issue here.

On the one hand, it could expose some of a user's home folder structure.

However, it's generally (and by that I mean I would be surprised if you found even one counter-example) going to be the very well-documented dotnet tools path, and as such isn't likely to cause any raised eyebrows.

For most users, even if there is another user's home path in that global path, there won't be any issues, as they likely won't have permissions to that other user's path and, as such, path resolution will just skip that path as "empty".

There are no reasonable security concerns here. There are no performance concerns that aren't inherent with any path lookup. There are, however, very real concerns of users not being able to use global dotnet tools at all.

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions