2009/1/13 Steve Kemp <s...@debian.org>:
> On Tue Jan 13, 2009 at 21:08:02 +0200, Dotan Cohen wrote:
>
>> Why is that dangerous? Because if your account is compromised then
>> critical system programs (ls, cd, and the like) can be easily replaced
>> with compromised versions. Putting your own bin at the end of the path
>> is meant to thwart this.
>
>  If your account is compromised then why do you imagine your
>  settings will be untouched?
>

Exactly, this is the fallacy.

>  People typically put their ~/bin directory first, precisely
>  so that they can override system-wide commands.
>

Exactly.

>  As for why it didn't work - the OP seemed to have said:
>
>    PATH = ...
>
>  (ie.  Spaces around the equals sign.  This will not work.)
>

I gave him an example of a valid .bash_profile file.

-- 
Dotan Cohen

http://what-is-what.com
http://gibberish.co.il

א-ב-ג-ד-ה-ו-ז-ח-ט-י-ך-כ-ל-ם-מ-ן-נ-ס-ע-ף-פ-ץ-צ-ק-ר-ש-ת
ا-ب-ت-ث-ج-ح-خ-د-ذ-ر-ز-س-ش-ص-ض-ط-ظ-ع-غ-ف-ق-ك-ل-م-ن-ه‍-و-ي
А-Б-В-Г-Д-Е-Ё-Ж-З-И-Й-К-Л-М-Н-О-П-Р-С-Т-У-Ф-Х-Ц-Ч-Ш-Щ-Ъ-Ы-Ь-Э-Ю-Я
а-б-в-г-д-е-ё-ж-з-и-й-к-л-м-н-о-п-р-с-т-у-ф-х-ц-ч-ш-щ-ъ-ы-ь-э-ю-я
ä-ö-ü-ß-Ä-Ö-Ü

Reply via email to