On Mon, Nov 28, 2005 at 10:21:58AM +0100, frantisek holop wrote:
> hmm, on Sun, Nov 27, 2005 at 04:31:31PM +0100, Said Outgajjouft said that
> > Line 92
> > @pwd_mkdb = ("pwd_mkdb", "-p"); # program for building passwd database
> > and line 133
> > @pwd_mkdb = ("pwd_mkdb", "-p", "-d", ".");
> >
> > Isn't it more secure to use absolute path for running the pwd_mkdb?
>
> @path = ('/bin', '/usr/bin', '/usr/local/bin');
that's the path where it looks for shells. a bit further you can see
$ENV{'PATH'} = "/sbin:/bin:/usr/sbin:/usr/bin";
and that is where pwd_mkdb will be found.
Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm
