[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: alias-like function?
|
From: |
Geraint Paul Bevan |
|
Subject: |
Re: alias-like function? |
|
Date: |
Thu, 15 Jan 2004 23:07:41 +0000 |
|
User-agent: |
Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.6b) Gecko/20031221 Thunderbird/0.4 |
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
address@hidden wrote:
|
| This is a security risk. If for any reason someone gets write-access to
| your local ~/bin directory, they can place scripts in there that can
| masquerade as the authentic system programs, like "passwd", etc.
|
| Generally not recommended.
|
| ~Tomer
|
Perhaps, but if an attacker is able to obtain your PATH and place
malicious scripts in specific directories on your home drive, it is
fairly likely that they also have the ability to modify your .bashrc
(and thus your PATH) directly.
- --
Geraint Bevan
http://homepage.ntlworld.com/geraint.bevan
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (GNU/Linux)
iEYEARECAAYFAkAHHTwACgkQcXV3N50QmNPSxQCbBighM2j8z9wysPfao3LASS49
79AAn1Tm9/kHEGsOwCs5cusUS/A9mOgN
=6y4H
-----END PGP SIGNATURE-----
-------------------------------------------------------------
Octave is freely available under the terms of the GNU GPL.
Octave's home on the web: http://www.octave.org
How to fund new projects: http://www.octave.org/funding.html
Subscription information: http://www.octave.org/archive.html
-------------------------------------------------------------