Re: no more /sbin in root path... been rooted?

[David Raulo <David.Raulo@inrialpes.fr>]

On Thursday 05 September 2002 10:48, Emmanuel Lacour wrote:
> On Thu, Sep 05, 2002 at 03:10:13PM +0700, Indra Kusuma wrote:
> > On Thu, 5 Sep 2002, David Raulo wrote:
> >
> > # > Did you login via SSH ??
> > # >
> > #
> > # No (I don't have a sshd running). The problem occurs when I log
> > # directly on console, or when I do "su -" from an xterm.
> > # Have you got an idea?
> >
> > hmm .. strange, when you "su -" then its use login
> > if your box has been rooted, posible backdoor is in the /bin/login
> > maybe you should re-install the login package, just to make sure.
> >
> > but before that please recheck /etc/login.defs, /etc/profile,
> > /etc/bashrc, ~/.bashrc
>
> Root path is defined in /root/.profile under debian potato/woody/...

thanks, that was the problem. For some unknown reason I didn't have a 
/root/.profile on this machine, and my other (working) woody box did have 
one (freshly installed with woody last week). Sorry, I should have noticed 
this.

So, if I understand correctly, here is finally how the PATH variable is 
defined when root logs on console :
- /etc/login.defs  defines 
PATH=/sbin:/bin:/usr/sbin:/usr/bin:/usr/bin/X11:/usr/local/sbin:/usr/local/bin
- /etc/profile (at least, mine) rewrites it with
PATH="/usr/local/bin:/usr/bin:/bin:/usr/bin/X11:/usr/games"
- /root/.profile  then replaces it again by
PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/bin/X11

well, why not?
Thanks for your help,

David.