[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: HELP ON PROBLEM




On Thu, 2 Apr 1998, Arie Guttman wrote:

> 	RH5 do not define the current directory in the path, you have to
> put the "." in our path, for example in csh/tcsh : setenv PATH=".:$PATH"
> 	I had the same problem and this solves it. Good luck.
> 
> 	Ariel, Please, put this question in the FAQ.
> 	Thanks& regards, 

actually, do NOT add this to any FAQ, unless you also add a paragraph
regarding the security risk of putting '.' inthe path on a multi-user
system.

consider the case when one has '.' in one's path, and then 'cd'-s to some
user's directory, and types 'lss' (a typoe, instead of typing ls', and
there is a program named 'lss' in that user's directory....

also, if the '.' directory is the first in your path, all the malicious
user needs to do is put a program named 'ls' in a directory with a
suspicious name....

guy