[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [cobalt-developers] Backups - Newbie



On Tue, 15 Aug 2000, H.P. Stroebel wrote:

> btw: if you use "su", you should call it ALWAYS with the complete path
> ("/bin/su") to decrease the danger of trojans. and instead of telnet,
> you should use ssh. see the knowledge base for installation
> instructions.

;-)  You're more paranoid than I am.  First of all, '.' should never be in
your path to begin with, and second of all, if the rest of your path (which
typically will be only the /bin:/usr/bin:/usr/local/bin, etc.) has been
compromised, it usually takes root powers to do so.  So, the trojan will *be*
/bin/su, and you've gained nothing.

	--Arthur Corliss
	  Bolverk's Lair -- http://www.odinicfoundation.org/arthur/
	  "Live Free or Die, the Only Way to Live" -- NH State Motto