[Top][All Lists]
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [screen-devel] Re: default --prefix and OpenBSD
From: |
Micah Cowan |
Subject: |
Re: [screen-devel] Re: default --prefix and OpenBSD |
Date: |
Mon, 22 Oct 2007 09:28:22 -0700 |
User-agent: |
Thunderbird 1.5.0.13 (X11/20070824) |
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Adam Lazur wrote:
> Micah Cowan (address@hidden) said:
>> On OpenBSD systems, which by default apparently append . to PATH,
>> ./configure apparently defaults to a --prefix of ., which isn't terribly
>> helpful.
>
> Wow, that can't be true. Can another openbsd user confirm this?
>
> Having . in PATH is one of the dumbest things I've ever heard, and is
> a huge security issue. Of all the BSDs, I'd be surprise if openbsd did
> it.
http://article.gmane.org/gmane.os.openbsd.misc/100581
(And see rest of thread.)
The reasoning appears to be that having . at the end of path is not that
bad (ignoring typos), and better than letting inexperienced users add it
in by prepending it. Note that, at least, root does not get . in path by
default (but I do not build as root). I don't put . in my path, either,
but I discovered it there after the screen-configuring issue, so thought
I should report it.
- --
Micah J. Cowan
Programmer, musician, typesetting enthusiast, gamer...
http://micah.cowan.name/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFHHM+l7M8hyUobTrERCCaPAJ9WCH9aQ/cS+2Q3pEgGmzJF11s0swCeLpLY
0m+7LByGa78ABonj6LiSehU=
=itHn
-----END PGP SIGNATURE-----