Gerfried Fuchs wrote:
Downloaded scripts don't get executable permission by default, so this
reasoning is flawed. They would have to get their permission changed to
executable intentionally.
Or they'd have to have been downloaded in a zipfile/tarball, or have
passed through a vfat/iso9660
Package: bash
Version: 4.1-2ubuntu4
Severity: normal
Tags: patch
User: ubuntu-de...@lists.ubuntu.com
Usertags: origin-ubuntu natty ubuntu-patch
This was orignally reported on
https://bugs.launchpad.net/ubuntu/+source/bash/+bug/684393
From the thread here:
Hi!
* Philip Muskovac yo...@gmx.net [2010-12-08 19:40:38 CET]:
This was orignally reported on
https://bugs.launchpad.net/ubuntu/+source/bash/+bug/684393
From the thread here: http://ubuntuforums.org/showthread.php?t=1634980
If you have a bin folder in yer home directory, it adds it to
Gerfried Fuchs wrote:
Philip Muskovac yo...@gmx.net:
It currently adds ~/bin to the start of $PATH, which has been brought up
as a bit of a security issue. It should add that path to the end of the
$PATH variable, not the beginning.
Actually I fail to see the security impact of this. If a
severity 606369 wishlist
retitle 606369 skel/.profile: put $HOME/bin at end of $PATH
quit
Justin B Rye wrote:
If as an innocent newcomer to GNU/Linux I sort a set of downloaded
scripts into one directory called keep and another called bin,
that doesn't necessarily mean I intend the second set
Hi!
* Justin B Rye j...@edlug.org.uk [2010-12-09 02:18:37 CET]:
Gerfried Fuchs wrote:
Actually I fail to see the security impact of this. If a user creates
the bin directory themself and put stuff in there themself then it's on
their own intention, not? I really fail to see the
6 matches
Mail list logo
