You are not logged in.

#1 2020-02-08 10:22:33

AcidGod
Member
Registered: 2019-02-13
Posts: 34

yay - find: The current directory is included in the PATH

Hi Everyone,

I am getting this error when I try to install `nerd-fonts-inconsolata`.

find: The current directory is included in the PATH environment variable, which is insecure in combination with the -execdir action of find.  Please remove the current directory from your
$PATH (that is, remove ".", doubled colons, or leading or trailing colons)
==> ERROR: A failure occurred in package().
    Aborting...
Error making: nerd-fonts-inconsolata

What could be causing it?

Offline

#2 2020-02-08 10:32:05

seth
Member
Registered: 2012-09-03
Posts: 49,994

Re: yay - find: The current directory is included in the PATH

Well, the message is pretty clear, isn't?
Your $PATH contains ".", which is not necessarily the smartest of all ideas.

If you did that (eg. in your bashrc), stop doing that.
If yay does that, stop using yay (or file a bug against yay to stop doing this)

Online

#3 2020-02-08 11:58:22

loqs
Member
Registered: 2014-03-06
Posts: 17,196

Re: yay - find: The current directory is included in the PATH

The PKGBUILD could also be adjusted to use find -exec instead of execdir to accommodate such $PATHs.

Offline

#4 2020-02-08 15:03:31

seth
Member
Registered: 2012-09-03
Posts: 49,994

Re: yay - find: The current directory is included in the PATH

Yes, could. However execdir is expicitly marked as the safer variant, thus may be invoked intentionally. If not necessarily here, very well so in other cases.
Likewise you may have to "fix" (and maintain) several PKGBUILDs and other scripts itr.

Or: you remove the CWD from PATH because the consensus is still that having it there is a bad idea to begin with and there's not even a good reason to have it there itfp.

On top of that, the OP had to ask for the error message meaning - so he doesn't understand the situation so chances are, he's googlecopied sth. like "PATH=.:/bin:…" into /etc/profile, which is about the worst case scenario (CWD shadows regular commands and is exported for UID0)



@AcidGod, it's your system and your choice, but to give you a background:

http://www.faqs.org/faqs/unix-faq/faq/p … on-13.html
https://unix.stackexchange.com/question … h-how-come
https://unix.stackexchange.com/question … ry-in-path
https://en.wikipedia.org/wiki/PATH_(variable)
https://superuser.com/questions/156582/ … by-default

Online

#5 2020-02-08 15:08:12

WorMzy
Forum Moderator
From: Scotland
Registered: 2010-06-16
Posts: 11,787
Website

Re: yay - find: The current directory is included in the PATH

Mod note: Moving to AUR Issues.


Sakura:-
Mobo: MSI MAG X570S TORPEDO MAX // Processor: AMD Ryzen 9 5950X @4.9GHz // GFX: AMD Radeon RX 5700 XT // RAM: 32GB (4x 8GB) Corsair DDR4 (@ 3000MHz) // Storage: 1x 3TB HDD, 6x 1TB SSD, 2x 120GB SSD, 1x 275GB M2 SSD

Making lemonade from lemons since 2015.

Offline

Board footer

Powered by FluxBB