crontab for ordinary users

Jeff Beadles jeff at onion.pdx.com
Tue Oct 23 16:56:11 AEST 1990


In <FPB.90Oct21120952 at ittc.ittc.wec.com> (Frank P. Bresz) writes:

...
>set path = (. ~ ~/bin $lpath /usr/local/bin /usr/ucb /usr/bin /usr/etc)
...

>	Now for the question (flame request) of the day.  Do people in
>general agree with me that .cshrc ought to not touch the path variable or
>the PATH env and just inherit it?

[ To directly answer your question;  No ]

I believe that you're doing your best to make your system vulnerable to a
trojan horse attack with a brain-damaged path like this.  

  *** DOT SHOULD NEVER BE FIRST IN YOUR PATH. ***

There are security papers galore that try to beat this into people, but they
just don't listen.  It IS a very good idea though.

Also, it could be argued that general users should not have /etc in their
paths...

If you MUST have dot (.) in your path, then at least put it at the very end.

(ie: set path = (~ ~/bin $lpath /usr/local/bin /usr/ucb /usr/bin /usr/etc .)

If you don't know why dot is bad in front of your path,  send me email telling
me why you need to know. :-)

	-Jeff
-- 
Jeff Beadles		jeff at onion.pdx.com



More information about the Comp.unix.shell mailing list