<?xml version="1.0" encoding="windows-1252"?>
<node id="862703" title="Re^3: Distro Pkg-Managed, broken Install.pm, sudo clears $PERL5LIB (sudoers)" created="2010-09-29 16:58:51" updated="2010-09-29 16:58:51">
<type id="11">
note</type>
<author id="510280">
shmem</author>
<data>
<field name="doctext">
&lt;blockquote&gt;&lt;i&gt;But please do not make passing on PERL5LIB a default. 
&lt;/i&gt;&lt;/blockquote&gt;
&lt;p&gt;&lt;i&gt;Why?&lt;/i&gt; The PERL5LIB environment variable is set up &lt;i&gt;after the fact&lt;/i&gt; (of changing &lt;c&gt;$&lt;&lt;/c&gt; and &lt;c&gt;$&gt;&lt;/c&gt;) &lt;i&gt;of getting broader permissions via sudo&lt;/i&gt;.&lt;/p&gt;
&lt;p&gt;So, a well thought-out privilege evelating scheme is more important than the passing of an environment variable while changing $UID, becaue you could set that very ENV var by hand, after running sudo.&lt;/p&gt;
&lt;p&gt;That statement of yours which I quoted looks to me very much like the bogus "eval is evil" and "don't use system $string" warnings, which are nonsense as absolutes, i.e. without context.&lt;/p&gt;
</field>
<field name="root_node">
862257</field>
<field name="parent_node">
862692</field>
</data>
</node>
