*BSD News Article 55604


Return to BSD News archive

Path: euryale.cc.adfa.oz.au!newshost.anu.edu.au!harbinger.cc.monash.edu.au!simtel!news.kei.com!newsfeed.internetmci.com!in2.uu.net!EU.net!Germany.EU.net!netmbx.de!bb-data.de!news!mib
From: mib@bb-data.de (Martin Ibert)
Newsgroups: comp.unix.bsd.freebsd.misc
Subject: Re: compiled program won't run.
Date: 21 Nov 1995 07:13:55 GMT
Organization: BB-DATA GmbH, Berlin, Germany
Lines: 14
Message-ID: <MIB.95Nov21081355@laforge.bb-data.de>
References: <480g7u$t2e@news.csus.edu> <dhawkDHvzsq.F5r@netcom.com>
	<Pine.SUN.3.90.951117125554.19452B-100000@hurricane.cs.odu.edu>
	<30ADDEA5.41C67EA6@FreeBSD.org>
NNTP-Posting-Host: laforge.ppe.bb-data.de
In-reply-to: "Jordan K. Hubbard"'s message of Sat, 18 Nov 1995 05:24:53 -0800

In article <30ADDEA5.41C67EA6@FreeBSD.org> "Jordan K. Hubbard" <jkh@FreeBSD.org> writes:

   If the `.' is at the very end of the path, and you have all possible
   directories in your path for any command name you might ever want to
   type as root, then it's not a security hole.  Otherwise, just think
   about it for a moment.

Don't forget, though, that you might accidently mistype something, as
in "ls-l" or somesuch. If there happens to be a executable file by
that name, it would be run.
-- 
---------------------------------------------------------------------------
Dipl.-Inform. Martin Ibert, BB-DATA GmbH, Brunnenstraße 111, D-13355 Berlin
>> e-mail <mib@bb-data.de>, phone +49-30-245-56582, fax +49-30-245-56577 <<