Re: XMMS in Applications Menu?
Re: XMMS in Applications Menu?
- Subject: Re: XMMS in Applications Menu?
- From: Jonas M Luster <email@hidden>
- Date: Mon, 3 Mar 2003 17:00:09 -0800
Quoting Martin Costabel (email@hidden):
> >that way, we're not relying on $PATH, there's no chance a malicious
> >attacker can place an executeable called xmms into $PATH before the
> >actual xmms,
>
> Even in your paranoid nightmares, this cannot happen: init.sh places
> /sw/bin at the beginning of the PATH.
> []
When is the last time you read you init.sh?
if [ -d /sw/etc/profile.d ]; then
for i in /sw/etc/profile.d/*.sh ; do
if [ -x $i ]; then
. $i
fi
done
unset i
fi
is called _after_ $PATH is set and exported. It's a trivial exercise
to modify $PATH at this point.
Paranoid nightmare? You must be kidding.
> >The latter (init.sh) is dependent on $SHELL, btw.
>
> I don't quite know what you mean by this. It doesn't depend on the
> user's login shell, in any case. The X11 Application menu always uses
> sh, even though the user may have the default tcsh as login shell.
Well, I must be smoking crack then, sorry. My Application menu uses
/bin/zsh as the background shell (small C program to dump $ENV). Makes
no difference in this case, but, well...
_______________________________________________
x11-users mailing list | email@hidden
Help/Unsubscribe/Archives: http://www.lists.apple.com/mailman/listinfo/x11-users
X11 for Mac OS X FAQ: http://developer.apple.com/qa/qa2001/qa1232.html
Report issues, request features, feedback: http://developer.apple.com/bugreporter
Do not post admin requests to the list. They will be ignored.