Re: small patch to etc/skel/dot.cshrc

[Andreas Kahari <ak+openbsd@freeshell.org>]

On Tue, Feb 17, 2004 at 06:45:54PM -0500, Chris Jepeway wrote:
> [ moved to misc@, perhaps presumptiously ]
> > [ . in PATH ] is not a security issue, if that what you are thinking, because 
> > the paths are searched in order.  all the normal binary directories are 
> > listed first, so no one can slip you a trojaned 'ls' or whatever in the 
> > current directory.
> OK, what about "sl"?  Or "fnid"?  Or "tpcdump"?
> Or, heck, what about "ethereal" if you don't
> have it installed on the machine where you're
> typing?

Exactly.  That's the point that this old FAQ entry makes as well
(last updated 1996):

http://www.faqs.org/faqs/unix-faq/faq/part2/section-13.html

Typing ./ is a habit you get into fairly quickly, just like
typing 'sudo' in front of commands instead of logging in as root
or using 'su'.


-- 
Andreas Kähäri                      |()()|
                                    |)()(|
East Anglia                         |()()|
England                             |)()(|