[issue1284316] Win32: Security problem with default installation directory

Steve Dower report at bugs.python.org
Wed Apr 15 22:35:43 CEST 2015


Steve Dower added the comment:

Closing this as fixed, as the discussions I've had at PyCon have largely suggested that the fix I've implemented is good.

In short:
* the default (obvious) install will be per-user only into %LocalAppData%\Programs\Python\Python35 - fully modifiable by whoever installed it but inaccessible by other users
* the default location for an all-users install will be %ProgramFiles%\Python 3.5 (with redirection for 32-bit processes) - fully modifiable by administrators and usable by all users

Obviously users can customize the install location to reduce security, but we can't prevent that.

----------
resolution:  -> fixed
status: open -> closed

_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue1284316>
_______________________________________


More information about the Python-bugs-list mailing list