[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

Re: Adding current directory to path



At 11:52 AM 5/31/99 -0400, you wrote:

>Can someone please tell me if there is a 'simple' way to add the current 
>working
>directory to the path.  I've been able to do it using functions etc but am
>wondering if there is an easier way.  i.e. Can I just add the "." character to
>the path?

Yes you can, but you REALLY, REALLY don't want to do that!  It opens a
major security hole in your system if you are ever on the Internet or if
you are in a multi-user situation.  (Classic example:  college hacker
plants a program called "su" in a directory.   It looks and acts like the
real su program, but it captures the login and password of the person who
uses it.  Hacker calls a sysop over to a terminal to complain that it isn't
working properly.  Sysop su's to root (instead of /sbin/su)and hacker has a
copy of the root password.)  Instead, move the program that you want to run
to a directory like /usr/bin that is in the path.  


Mark
              ___
            __HHH__
             (@ @)
--------.oOO--\_/--OOo.---------------------------------------------
| Mark Neidorff                |Descartes walks into a bar, the    |
| neidorff cybernex net        |bartender asks,"Can I get you a    |
| Just Answers!                |drink?"  Descartes replies,        |
| Computer Systems Solutions   |"I think not." --and he disappears.|
-------.ooo0-------0ooo.--------------------------------------------
       (   )       (   )
        \ (         ) /
         \_)       (_/



[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]