[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [cobalt-users] [RAQ2] Newbie Question - Telnet Reboot
- Subject: Re: [cobalt-users] [RAQ2] Newbie Question - Telnet Reboot
- From: jk@xxxxxxxxxxxx (Jens Kristian Søgaard)
- Date: Fri Jun 2 17:10:41 2000
"Daniel Pfeifer" <dpfeifer@xxxxxxx> writes:
> > > ./shutdown -r now
> > That would require him to be in a directory where shutdown were
> > installed.
> Right, but I thought he knew that he has to be in that directory?
Don't make a habit of doing so. It's not wise.
Root should always be aware of _where_ the commands are. Always use
full paths to the program, or only use programs in your PATH. Never
put "." in your PATH.
The reason to this is, that a malicious user could put often used
commands in his homedirectory. If the root-user unknowingly executes
one of these (fx by typing ls in a user-directory, while having "." in
PATH) - terrible things could happen.
Therefore use:
/sbin/shutdown -r now
--
Jens Kristian Søgaard,
jk@xxxxxxxxxxxx -- http://www.jksoegaard.dk/
Søger du noget? -- http://www.google.com/
echo|perl -ple'$_+=4E-6*!int rand()**2+rand()**2while$i++-1E6'