crontab for ordinary users
Jeff Beadles
jeff at onion.pdx.com
Tue Oct 23 16:56:11 AEST 1990
In <FPB.90Oct21120952 at ittc.ittc.wec.com> (Frank P. Bresz) writes:
...
>set path = (. ~ ~/bin $lpath /usr/local/bin /usr/ucb /usr/bin /usr/etc)
...
> Now for the question (flame request) of the day. Do people in
>general agree with me that .cshrc ought to not touch the path variable or
>the PATH env and just inherit it?
[ To directly answer your question; No ]
I believe that you're doing your best to make your system vulnerable to a
trojan horse attack with a brain-damaged path like this.
*** DOT SHOULD NEVER BE FIRST IN YOUR PATH. ***
There are security papers galore that try to beat this into people, but they
just don't listen. It IS a very good idea though.
Also, it could be argued that general users should not have /etc in their
paths...
If you MUST have dot (.) in your path, then at least put it at the very end.
(ie: set path = (~ ~/bin $lpath /usr/local/bin /usr/ucb /usr/bin /usr/etc .)
If you don't know why dot is bad in front of your path, send me email telling
me why you need to know. :-)
-Jeff
--
Jeff Beadles jeff at onion.pdx.com
More information about the Comp.unix.shell
mailing list