Re: RedHAt's SU the mother of all trojan horses

[Chris Pinnock]

On Sat, Mar 25, 2000 at 04:37:24PM +0100, JF Martinez wrote:
> 
> It is unfortunate that RedHat's SU keeps the same environment and
> specially the same PATH as this leaves the user open to a trivial
> attack: either a user who places a malicious program in his $HOME/bin

I always do "su -" 

or if I'm in a more strict mood, /bin/su -

-- 
Chris 

-- 
To unsubscribe:
mail -s unsubscribe [EMAIL PROTECTED] < /dev/null