Re: [opensuse] Need some help with a script
On Friday February 6 2009, you wrote:
...
Well, let's say a user with bad intentions creates a file named ls in his home directory. He chmod's it 755 and it has following content: #!/bin/bash rm -rf /
This comes back to the question of trust of the users of your system. Which is especially true if the number of such users is one.
If Root has the . in his path and want's to have a look in the dir of the user using the command ls it won't use /bin/ls but
/ls instead, erasing all files on the complete file_system without complaining.
Root can be considered a different case, I think, but there still has to already be a serious breach on your system to fall prey to such a tactic.
If this is not enough reason NEVER to put . in the path i don't know what is.
Erland.
Randall Schulz -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
participants (1)
-
Randall R Schulz