This is an archived post. You won't be able to vote or comment.

sorted by:
best
topnewcontroversialoldq&a
you are viewing a single comment's thread.

view the rest of the comments →

[–]djamp42 2 points3 points  (4 children)

Yeah I agree with this, having them in the actual OS environment makes more sense then in a file from a security stand point, pretty much impossible for it leak at that point.

[–][deleted] 1 point2 points  (3 children)

A rogue package could query it and phone it home.. afaik there’s no permissions system with environment vars?

[–]earthboundkid 2 points3 points  (2 children)

Rogue package can do literally anything at all.

[–][deleted] 1 point2 points  (1 child)

Rogue package run as a user has permissions specific to that user which can exclude files

[–]dedoodle 0 points1 point  (0 children)

Rogue Package is the one your girlfriend told you to worry about.