sm-discuss AT lists.ibiblio.org
Subject: Public SourceMage Discussion List
List archive
- From: Seth Alan Woolley <seth AT positivism.org>
- To: Geoffrey Derber <gderber AT sourcemage.org>
- Cc: Discuss SM <sm-discuss AT lists.ibiblio.org>
- Subject: Re: [SM-Discuss] bash_profile and bashrc . . .
- Date: Fri, 18 Mar 2005 15:47:49 -0800
On Fri, Mar 18, 2005 at 06:37:29PM -0500, Geoffrey Derber wrote:
> On Fri, 2005-03-18 at 18:49 +0100, Arjan Bouter wrote:
>
> > This also is not a bug. This is a security measure. Root's profile
> > can/should be
> > different from that of normal users. For example root can have /sbin in
> > $PATH
> > which normal users shouldn't need and to minimize the risk of a
> > non-functional
> > root account things like bash-completion and other stuff which installs in
> > /etc/profile.d shouldn't be in root's profile. By installing a normal
> > file
> > instead of a link you make sure lazy admins don't use /etc/profile
> > instead of
> > their own.
>
> If we are considering the security risk, shouldn't the /sbin directories
> be removed from /etc/profile? In which case we'd also probably want to
> move 'gaze' to /usr/bin or something like that.
This has nothing to do with security. /sbin/gaze works even when PATH
doesn't have /sbin/. PATH is only a convenience.
/etc/profile.d shouldn't be picked up automatically by the root account,
though, that is a good point. I prefer my root account prompt to be
totally different than user accounts, too, for example (more than just
$/#).
Seth
--
Seth Alan Woolley [seth at positivism.org], SPAM/UCE is unauthorized
Key id 00BA3AF3 = 8BE0 A72E A47E A92A 0737 F2FF 7A3F 6D3C 00BA 3AF3
http://smgl.positivism.org:11371/pks/lookup?op=get&search=0x00BA3AF3
Security Team Leader Source Mage GNU/Linux http://www.sourcemage.org
Attachment:
pgp9CgYyo1m0Z.pgp
Description: PGP signature
-
Re: [SM-Discuss] bash_profile and bashrc . . .
, (continued)
-
Re: [SM-Discuss] bash_profile and bashrc . . .,
Eric Sandall, 03/18/2005
- Re: [SM-Discuss] bash_profile and bashrc . . ., Jason Flatt, 03/18/2005
-
Re: [SM-Discuss] bash_profile and bashrc . . .,
Arjan Bouter, 03/18/2005
-
Re: [SM-Discuss] bash_profile and bashrc . . .,
Geoffrey Derber, 03/18/2005
-
Re: [SM-Discuss] bash_profile and bashrc . . .,
Andrew, 03/18/2005
-
Re: [SM-Discuss] bash_profile and bashrc . . .,
Arjan Bouter, 03/18/2005
- Re: [SM-Discuss] bash_profile and bashrc . . ., Eric Sandall, 03/18/2005
- Re: [SM-Discuss] bash_profile and bashrc . . ., Andrew, 03/18/2005
- Re: [SM-Discuss] bash_profile and bashrc . . ., Jason Flatt, 03/18/2005
- Re: [SM-Discuss] bash_profile and bashrc . . ., Eric Sandall, 03/18/2005
-
Re: [SM-Discuss] bash_profile and bashrc . . .,
Arjan Bouter, 03/18/2005
-
Re: [SM-Discuss] bash_profile and bashrc . . .,
Seth Alan Woolley, 03/18/2005
-
Re: [SM-Discuss] bash_profile and bashrc . . .,
Eric Schabell, 03/19/2005
- Re: [SM-Discuss] bash_profile and bashrc . . ., Seth Alan Woolley, 03/19/2005
-
Re: [SM-Discuss] bash_profile and bashrc . . .,
Eric Schabell, 03/19/2005
-
Re: [SM-Discuss] bash_profile and bashrc . . .,
Andrew, 03/18/2005
-
Re: [SM-Discuss] bash_profile and bashrc . . .,
Geoffrey Derber, 03/18/2005
-
Re: [SM-Discuss] bash_profile and bashrc . . .,
Eric Sandall, 03/18/2005
Archive powered by MHonArc 2.6.24.