-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

David Laight wrote:
> On Sun, Mar 25, 2007 at 10:33:25PM -0500, Brian A. Seklecki wrote:
>> There's always the possibility you're $PWD is a og+w bit
>> (/tmp, /var/tmp) and someone slips in an executable shell script there
>> for a command you might type that isn't located in $PATH yet.
> 
> Indeed, so if you run as root, with '.' in your $PATH, on a system
> where other people might put stuff into odd directories, you are stupid.
seconded , This is ancient trick.
> 
> There are a lot of other ways a root user can shoot themselves in the foot!
> Do you type 'su root' or 'su - root', if the former you are much more
> likely to hit problems.

Can you explain it little bit more. I use "su root" mostly so I want how can I
reach problems. I don't have "." in my $PATH :).

> 
> That doesn't mean that the build should fail because '.' is at the end
> of $PATH.
> 
> 	David
> 

- --
- ---------------------------------------------------------------
Adam Hamsik
ICQ 249727910
jabber haad@jabber.org
- ---------------------------------------------------------------
There are 10 kinds of people in the world. Those who understand
binary numbers, and those who don't.
				
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (NetBSD)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFGCEqi9Wt2FT7y228RAu77AKCCW3Gpi1eQNt3QY72S3DLfnW3DtQCfZ/eS
g29c3NgU5G+p07BIjihF4n8=
=/aQg
-----END PGP SIGNATURE-----