pk wrote: > ubiquitous1980 wrote: > > >>> http://lists.debian.org/debian-security/2006/07/msg00059.html >>> > > >> With "sudo su - " the man pages do not have ESC throughout. I have >> learned sudo su from my ubuntu days and I am only guessing that this is >> bad practice and that the correct command is $ sudo su - >> > > No need to guess. Messing with superuser privileges without a proper > superuser environment (paths etc.) is considered bad from a security > point of view; for instance, an malicious application could be installed > in your user home dir, prepend the path to this to your local user $PATH > and whenever you do "su" (without -) you could invoke this app with > superuser privileges... > So to summarize: The link above (debian.org) explains it quite well and > yes, I would say it's a bad habit to omit -. :-) > > Best regards > > Peter K > > Thanks for your explanation and I will remember this lesson.]
Thanks, Damien
