*BSD News Article 59363


Return to BSD News archive

Path: euryale.cc.adfa.oz.au!newshost.anu.edu.au!harbinger.cc.monash.edu.au!news.mel.connect.com.au!munnari.OZ.AU!news.ecn.uoknor.edu!paladin.american.edu!gatech!newsfeed.internetmci.com!vixen.cso.uiuc.edu!howland.reston.ans.net!blackbush.xlink.net!rz.uni-karlsruhe.de!news.uni-stuttgart.de!schweikh
From: schweikh@itosun.ito.uni-stuttgart.de (Jens Schweikhardt)
Newsgroups: comp.unix.bsd.freebsd.misc
Subject: Re: How to configure network under FreeBSD
Date: 11 Jan 1996 17:03:01 GMT
Organization: Comp.Center (RUS), U of Stuttgart, FRG
Lines: 35
Message-ID: <4d3fs5$1bsg@info4.rus.uni-stuttgart.de>
References: <4zF8wkoYzg8L084yn@hntp2.hinet.net> <4cr4qh$pl@uriah.heep.sax.de> <4d25np$c8o@news.voicenet.com> <4d3eut$cc3@usenet.ucs.indiana.edu>
NNTP-Posting-Host: itosun.ito.uni-stuttgart.de

In article <4d3eut$cc3@usenet.ucs.indiana.edu>,
Alec Habig <ahabig@bigbang.astro.indiana.edu> wrote:
>The Notorious B.S.D. <The Notorious B.S.D.> wrote:
>>j@uriah.heep.sax.de (J Wunsch) wrote:
>>
>>> You don't have `.' in your path. Unlike
>>>messy dos, unix doesn't have this automagically
>>
>>> (and the superuser should never have it at all).
>>
>>^^^^^^ how come?
>
>because it increases the chance that you'll accidentally run a program that
>you're not intending to run.  As root, that could be disasterous.

Even putting . as the _last_ element is a risk.
Consider this:

naughty_user% cat > /tmp/ks
#!/bin/sh
rm -rf $HOME
^D
naughty_user% chmod 755 /tmp/ks


you% cd /tmp
you% ks   # oops! a typo. Actually you wanted 'ls'
<disk starts making some noise...>
<you start making some noise...>

So never put . in your PATH.

bye, Jens
-- 
SIGSIG -- signature too long (core dumped)