Re: Can Red Hat Linux run Shell Script?

Article View: alt.uu.comp.os.linux.questions

Article #151

Back to alt.uu.comp.os.linux.questions Previous Next

#151

From: Doug Mast
Date: Wed, 25 Aug 1999 00:00

19 lines
2107 bytes

On 24 Aug 1999 10:46:39 +0100, John Winters <john@polo.demon.co.uk> wrote:
> In article <xak3dx9tvfs.fsf@par.univie.ac.at>,
> Alex Pozgaj  <alex@par.univie.ac.at> wrote:
> >Jason Clifford <jason@dlsl.demon.co.uk> writes:
> >> This is VERY bad advise. Having "." in your PATH env is a HUGE security
> >> risk.  It is far better to get into the habbit of using ./
> >
> >It is - if you are root. Otherwise it's OK.
> 
> ...provided there are no other users of your system with possible
> malicious intent.  If you run a single user Linux system at home it's
> perhaps acceptable (although a bad habit).  If you use any kind of
> shared system it's a big no-no.

Well, the risk is pretty minimial if "." appears last in your path.
That way, the real "ls" or whatever will be called instead of 
a trojan "ls" that does something nasty. . .

Doug.

Technical Details

Message-ID: <slrn7s6jau.uv8.mast@holly.arl.psu.edu>

Path: arc1-ca.pugleaf.net!unknown!not-for-mail

References:

<7plmre$8e1$1@toto.tig.com.au> <37C14000.63EBEC59@total4.nl> <Pine.LNX.4.10.9908231507180.1457-100000@laptop.jasonclifford.com> <xak3dx9tvfs.fsf@par.univie.ac.at> <7ptplv$ld4$1@polo.demon.co.uk>

Show Full Headers

Complete Article Headers

X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: fe2cf,d9db4d784d4d5b62
X-Google-Attributes: gidfe2cf,public
X-Google-Thread: 102983,d9db4d784d4d5b62
X-Google-Attributes: gid102983,public
X-Google-Thread: 10d8ad,d9db4d784d4d5b62
X-Google-Attributes: gid10d8ad,public
X-Google-Thread: 1101c9,d9db4d784d4d5b62
X-Google-Attributes: gid1101c9,public
X-Google-Thread: f9b51,d9db4d784d4d5b62
X-Google-Attributes: gidf9b51,public
X-Google-Thread: 10a997,d9db4d784d4d5b62
X-Google-Attributes: gid10a997,public
X-Google-Thread: fcfb9,d9db4d784d4d5b62
X-Google-Attributes: gidfcfb9,public
From: mast@holly.arl.psu.edu (Doug Mast)
Subject: Re: Can Red Hat Linux run Shell Script?
Date: 1999/08/25
Message-ID: <slrn7s6jau.uv8.mast@holly.arl.psu.edu>
X-Deja-AN: 516824708
References: <7plmre$8e1$1@toto.tig.com.au> <37C14000.63EBEC59@total4.nl> <Pine.LNX.4.10.9908231507180.1457-100000@laptop.jasonclifford.com> <xak3dx9tvfs.fsf@par.univie.ac.at> <7ptplv$ld4$1@polo.demon.co.uk>
Organization: Penn State University, Center for Academic Computing
Reply-To: mast@sabine.acs.psu.edu
Newsgroups: alt.uu.comp.os.linux.questions,at.linux,aus.computers.linux,comp.os.linux.advocacy,comp.os.linux.setup,linux.redhat,uk.comp.os.linux

Reply to Parent Message