do not expose custom $PATH

[Martin Pitt]

Binary package hint: apport

At least when filing bug reports, apport should not automatically report $PATH. It already filters out login names and such, but $PATH might contain unrelated personal strings.

It should merely classify $PATH into "default" (/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games), "system" (only /usr/bin, /bin, etc.), and "user" (including paths from non-system directories, such as /home/... or /tmp).

[Martin Pitt (pitti)]

Fixed in bzr trunk.

[Launchpad Janitor (janitor)]

This bug was fixed in the package apport - 0.121

---------------
apport (0.121) jaunty; urgency=low

  * debian/apport.init: Drop long obsolete setting of
    /proc/sys/kernel/crashdump-size.
  * debian/apport.init: Make restart actually work if the default file was
    changed. (LP: #292402)
  * apport/report.py, add_proc_environ(): Do not include verbatim $PATH, only
    classify it as "default" (does not appear at all then), "custom,
    user" (/home or /tmp in $PATH), or "custom, no user". Add appropriate test
    case. Update the data format documentation accordingly. (LP: #245263)

 -- Martin Pitt <email address hidden> Mon, 08 Dec 2008 19:37:53 -0800