build: Do not allow PATH leakage into Bazel build
Bug: b/294284927
Change-Id: Ifaaab94a5485fced1aa88d72115a96703a97d7eb
Reviewed-on: https://pigweed-review.googlesource.com/c/pigweed/pigweed/+/162610
Reviewed-by: Erik Gilling <konkers@google.com>
Presubmit-Verified: CQ Bot Account <pigweed-scoped@luci-project-accounts.iam.gserviceaccount.com>
Commit-Queue: Auto-Submit <auto-submit@pigweed-service-accounts.iam.gserviceaccount.com>
Pigweed-Auto-Submit: Armando Montanez <amontanez@google.com>
diff --git a/.bazelrc b/.bazelrc
index 8899f3d..9fd023b 100644
--- a/.bazelrc
+++ b/.bazelrc
@@ -47,15 +47,6 @@
# Allow uses of the register keyword, which may appear in C headers.
build --cxxopt="-Wno-register"
-# This leaks the PATH variable into the Bazel build environment, which
-# enables the Python pw_protobuf plugins to find the Python version
-# via CIPD and pw_env_setup. This is a partial fix for pwbug/437,
-# however this does not provide a fix for downstream projects that
-# use system Python < 3.6. This approach is problematic because of the
-# Protobuf rebuild sensitivity to environment variable changes.
-# TODO(pwbug/437): Remove this once pwbug/437 is completely resolved.
-build --action_env=PATH
-
build --@mbedtls//:mbedtls_config=//third_party/mbedtls:default_config
# Define the --config=asan-libfuzzer configuration.
