Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 7 Jan 2008 13:21:41 -0500
From:      Mike Jeays <mike.jeays@rogers.com>
To:        freebsd-questions@freebsd.org
Subject:   Re: home dir executable (!/bin/sh, chmod+x) shell scripts won't run without "sh <script>"
Message-ID:  <200801071321.41458.mike.jeays@rogers.com>
In-Reply-To: <20080107170439.GA39088@wafer.urgle.com>
References:  <539c60b90801070752l3d0e571cq8f7b1b519e1e808c@mail.gmail.com> <20080107165047.GA12249@aleph.cepheid.org> <20080107170439.GA39088@wafer.urgle.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On January 7, 2008 12:04:39 pm Mike Bristow wrote:
> On Mon, Jan 07, 2008 at 10:50:47AM -0600, Erik Osterholm wrote:
> > The '.' notation for the current working directory enables you to add
> > the current directory you happen to be in as part of your path (thus
> > making it searched when executing a command), however this has serious
> > security implciations, so if you think that it's something you really
> > want to do, you'll have to find out from someone else how to do it.
>
> OTOH, having ~/bin in the path has no security implications at all -
> assuming your scripts are OK, of course.

I don't see anything especially bad about putting "." as the last item in the 
PATH on a personal desktop machine.  It is convenient, IMHO worth the risk.  
If my desktop gets hacked, I have worse problems to worry about than this.



-- 
Mike Jeays
http://www.jeays.ca



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200801071321.41458.mike.jeays>