[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Why having the . at the end of someone's PATH is a security ?



On Wed, 14 Oct 1998 23:28:55 +0300, shaul wrote:

>> There shouldn't be a "." in your PATH; even at the end, it's a
>> security risk. 

>Why ? How it can be exploited ?

    By someone putting an executable in a directory you normally visit
(/home/username anyone?) that does something unexpected.

    Personally, I only worry about . in the path of root.

-- 
         Steve C. Lamb         | I'm your priest, I'm your shrink, I'm your
         ICQ: 5107343          | main connection to the switchboard of souls.
-------------------------------+---------------------------------------------



Reply to: