[Gllug] What's so good about Debian?

[Bruce Richardson]

On Thu, Oct 09, 2003 at 02:01:06PM +0100, Richard wrote:
> if you add something like:
> 
> export PATH=$PATH:.
> 
> to your ~/.profile file (implicitly executed by the shell when you log 
> in) then it will add the current directory to your PATH in future.

But *don't* do it.  It's not in the path for good reasons of security.
All the directorys in the path should be static ones, not relative ones.
If you place relative directory names like './bin' or '.' into the path
then you are making it possible for people to trick you into running
malicious code with your user permissions (fatal, if you are logged in
as root).

For the same reason, you should always specify a full path to any
program you invoke in a script or name in an alias. 

-- 
Bruce

Those who cast the votes decide nothing.  Those who count the
votes decide everything. -- Joseph Stalin
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 261 bytes
Desc: not available
URL: <http://mailman.lug.org.uk/pipermail/gllug/attachments/20031009/c5af2ba6/attachment.pgp>
-------------- next part --------------
-- 
Gllug mailing list  -  Gllug at linux.co.uk
http://list.ftech.net/mailman/listinfo/gllug