[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: GLIBC_2.4



I wrote:
> See my other reponse to this thread.  ~/bin at the front of $PATH is a
> security risk.

Miles writes:
> It an attacker is able to install stuff in ~/bin, they can (and almost
> certainly would) also modify your .profile (etc) to change PATH
> themselves.

There are a number of such exposures for the naive users that are now
starting to put Linux on their computers.  They will be exploited when the
number of vulnerable machines gets large enough.
-- 
John Hasler



Reply to: