On 7/27/11 1:09 PM, Reindl Harald wrote:
> Depends on the PATH-Order
>
> if something is intended to be first in PATH and any attacker is able
> to write there his "ls" would win against "/bin/ls"

So, the attacker can write a compromised ls into .local/bin/, but isn't 
able to modify your .bash_profile ?  Seems like a stretch.

-- 
Jesse Keating
Fedora -- Freedom² is a feature!
identi.ca: http://identi.ca/jkeating
-- 
devel mailing list
devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel

Reply via email to