[Bash-completion-devel] Bug#497597: Bug#497597: bash-completion: gdb argument completions returns error

[David Paleino]

On Sun, 7 Sep 2008 10:38:17 +0200, David Paleino wrote:

> On Sun, 07 Sep 2008 13:56:35 +0900, Morita Sho wrote:
> 
> > On 09/07/2008 01:05 PM, Kevin Mitchell wrote:
> > > Ok, well it probably should have occured to me to actually include my
> > > $PATH variable:
> > > 
> > > $ echo $PATH
> > > :/home/kevmitch/bin:/usr/local/bin:/usr/bin:/bin:/usr/games
> > > 
> > > Note the preceding ":" which should include the current directory in
> > > accordance with bash(1):
> 
> [..]
> 
> P.S.: however, I read somewhere (can't remember where, sorry), that adding "."
> to $PATH is a bad habit...

Imagine you write a script and call it "ls", then save it in a directory where
you have access, /tmp/ for example. Now if you get another user to run "ls"
in /tmp/ as root and have "." in the PATH, that will run your script instead of
running the real "ls". This way you can do some nasty tricks. :)

-- 
 . ''`.  Debian maintainer | http://wiki.debian.org/DavidPaleino
 : :'  : Linuxer #334216 --|-- http://www.hanskalabs.net/
 `. `'`  GPG: 1392B174 ----|---- http://snipr.com/qa_page
   `-   2BAB C625 4E66 E7B8 450A C3E1 E6AA 9017 1392 B174
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 197 bytes
Desc: not available
Url : http://lists.alioth.debian.org/pipermail/bash-completion-devel/attachments/20080907/4bc54f0f/attachment-0001.pgp