[OS X TeX] TeXLive 2006 (MacTeX) is not detected...

Nestor Aguilera aguilera at ceride.gov.ar
Wed Jan 3 16:51:42 CET 2007


Hi,

On 3 Jan, 2007, at 12:16, Franck Pastor wrote:

> When I call a command, I don't put a dot before the command, I put  
> nothing at all, only the file name. Thanks to this dot in the  
> contents of my PATH variable, which means that this file name will  
> be searched also in the current directory as well as /usr/bin or / 
> usr/ocal/bin.
>
> But according to Herb Schulz, adding "." (the current directory) in  
> the contents of my PATH variable could create security gap... Why?

I don't know about the security risk mentioned by Herb:

> On 3 Jan, 2007, at 11:54, Herbert Schulz wrote:
>
> Seems to me that putting your current directory in your path,  
> especially when it is in the middle of the PATH, is a real security  
> risk. If you want to execute something in the present directory you  
> should be do it explicitly, ./foo for example.

Usually what I want is to put a directory either first or last in the  
path. (Herb is referring to having the current directory in the  
middle of the path.)

To do this (and/or include other directories) I use a script with the  
pathmunge function mentioned in http://tldp.org/LDP/Bash-Beginners- 
Guide/html/sect_11_02.html. Perhaps this could be of use to you too.

Best,

                                                  Nestor Aguilera

------------------------- Helpful Info -------------------------
Mac-TeX Website: http://www.esm.psu.edu/mac-tex/
TeX FAQ: http://www.tex.ac.uk/faq
List Archive: http://tug.org/pipermail/macostex-archives/
List Reminders & Etiquette: http://www.esm.psu.edu/mac-tex/list/





More information about the macostex-archives mailing list