[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
RE: HELP ON PROBLEM
On Thu, 2 Apr 1998, Arie Guttman wrote:
> RH5 do not define the current directory in the path, you have to
> put the "." in our path, for example in csh/tcsh : setenv PATH=".:$PATH"
> I had the same problem and this solves it. Good luck.
>
> Ariel, Please, put this question in the FAQ.
> Thanks& regards,
actually, do NOT add this to any FAQ, unless you also add a paragraph
regarding the security risk of putting '.' inthe path on a multi-user
system.
consider the case when one has '.' in one's path, and then 'cd'-s to some
user's directory, and types 'lss' (a typoe, instead of typing ls', and
there is a program named 'lss' in that user's directory....
also, if the '.' directory is the first in your path, all the malicious
user needs to do is put a program named 'ls' in a directory with a
suspicious name....
guy