[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Rationale



on Sun, Nov 30, 2003 at 11:01:35PM +0100, John Smith (netman1@home.nl) wrote:
> Hi All,
> 
> 	checked google, asked this before on irc, didn't get a 
> usable answer (can't find any use of /etc/login.defs).
> 
> 	What is the rationale behind the PATH environment variable?
> Running woody I get 
> 
> /usr/local/bin:/usr/bin:/bin:/usr/bin/X11:/usr/games
> 
> as a normal user. As root I get
> 
> /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:
> /usr/bin/X11
> 
> Thinking security I would expect them the other way around. 

Then change it.

If you're not allowing world write to /usr/local/(s)bin, you should be
OK.  The usual justification is that your locally defined commands
superscede system commands.


Peace.

-- 
Karsten M. Self <kmself@ix.netcom.com>        http://kmself.home.netcom.com/
 What Part of "Gestalt" don't you understand?
    Those who would give up essential Liberty, to purchase a little
    temporary Safety, deserve neither Liberty nor Safety.
    - Benjamin Franklin, 1755

Attachment: pgpp1Pdn3qYpg.pgp
Description: PGP signature


Reply to: