Re: [PATCH 0/1] compaudit: add ZSH_COMPLETION_USERS parameter

[Oliver Kiddle <opk@xxxxxxx>]

Bart Schaefer wrote:
> On Tue, Jun 30, 2026 at 8:30 AM dana <dana@xxxxxxx> wrote:
> >
> > i never submitted it, though, because oliver thinks compaudit is
> > pointless in the first place. he seems to feel pretty strongly about
> > that, maybe we could form a consensus on it

That at least sounds somewhat better than a solution that involves
trusting an environment variable.

> I've no complaint about removing compaudit from the compinit startup.
> I've forgotten the specific impetus for having it there (other than
> the obvious).  It might still be useful as a standalone tool to run
> e.g. after installing a package that contains completion functions.

Tracking down the origins brings me to 11440, 11976 and 11998. The
initial notion was perhaps just checking for world-writable files when
EUID == 0.

Given the lack of checking on anything in $path, I don't see why $fpath
should really be any different. compinit is slow enough and the audit
doesn't help. And it manages is to be an annoyance when flagging things
that are harmless.

I can see the value of a standalone tool. Perhaps, keeping compinit
options to run it just with the default being not to bother. And dana's
additional option to whitelist specific owners.

Oliver