Mailinglist Archive: opensuse (4749 mails)

< Previous Next >
Re: [SLE] Root PATH
  • From: Anders Johansson <andjoh@xxxxxxxxxx>
  • Date: Mon, 12 May 2003 00:06:54 +0200
  • Message-id: <200305120006.54170.andjoh@xxxxxxxxxx>
On Monday 12 May 2003 00:05, Thomas Jones wrote:
> PATH=$USER/bin:/usr/local/bin:/usr/bin:/usr/X11R6/bin:/bin

yikes. So a malicious user on your system would create /tmp/root/bin/cp

or some other common command, and just wait. Not a good idea to have relative
paths in $PATH

< Previous Next >
Follow Ups