[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [cobalt-users] [RAQ2] Newbie Question - Telnet Reboot



"Daniel Pfeifer" <dpfeifer@xxxxxxx> writes:

> > > ./shutdown -r now

> > That would require him to be in a directory where shutdown were
> > installed.

> Right, but I thought he knew that he has to be in that directory?

Don't make a habit of doing so. It's not wise.

Root should always be aware of _where_ the commands are. Always use
full paths to the program, or only use programs in your PATH. Never
put "." in your PATH.

The reason to this is, that a malicious user could put often used
commands in his homedirectory. If the root-user unknowingly executes
one of these (fx by typing ls in a user-directory, while having "." in
PATH) - terrible things could happen.

Therefore use:

        /sbin/shutdown -r now


-- 
Jens Kristian Søgaard,
jk@xxxxxxxxxxxx -- http://www.jksoegaard.dk/
Søger du noget? -- http://www.google.com/
echo|perl -ple'$_+=4E-6*!int rand()**2+rand()**2while$i++-1E6'