From help-octave-request at bevo dot che dot wisc dot edu Thu Jan 15 17:02:39 2004
Subject: Re: alias-like function?
From: Geraint Paul Bevan <g dot bevan at mech dot gla dot ac dot uk>
To: taltman at lbl dot gov
CC: help-octave <help-octave at bevo dot che dot wisc dot edu>
Date: Thu, 15 Jan 2004 23:07:41 +0000

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

taltman at lbl dot gov wrote:

|
| This is a security risk. If for any reason someone gets write-access to
| your local ~/bin directory, they can place scripts in there that can
| masquerade as the authentic system programs, like "passwd", etc.
|
| Generally not recommended.
|
| ~Tomer
|

Perhaps, but if an attacker is able to obtain your PATH and place
malicious scripts in specific directories on your home drive, it is
fairly likely that they also have the ability to modify your .bashrc
(and thus your PATH) directly.


- --
Geraint Bevan
http://homepage.ntlworld.com/geraint.bevan

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (GNU/Linux)

iEYEARECAAYFAkAHHTwACgkQcXV3N50QmNPSxQCbBighM2j8z9wysPfao3LASS49
79AAn1Tm9/kHEGsOwCs5cusUS/A9mOgN
=6y4H
-----END PGP SIGNATURE-----



-------------------------------------------------------------
Octave is freely available under the terms of the GNU GPL.

Octave's home on the web:  http://www.octave.org
How to fund new projects:  http://www.octave.org/funding.html
Subscription information:  http://www.octave.org/archive.html
-------------------------------------------------------------