[OS X TeX] TeXLive 2006 (MacTeX) is not detected...
Nestor Aguilera
aguilera at ceride.gov.ar
Wed Jan 3 16:51:42 CET 2007
Hi,
On 3 Jan, 2007, at 12:16, Franck Pastor wrote:
> When I call a command, I don't put a dot before the command, I put
> nothing at all, only the file name. Thanks to this dot in the
> contents of my PATH variable, which means that this file name will
> be searched also in the current directory as well as /usr/bin or /
> usr/ocal/bin.
>
> But according to Herb Schulz, adding "." (the current directory) in
> the contents of my PATH variable could create security gap... Why?
I don't know about the security risk mentioned by Herb:
> On 3 Jan, 2007, at 11:54, Herbert Schulz wrote:
>
> Seems to me that putting your current directory in your path,
> especially when it is in the middle of the PATH, is a real security
> risk. If you want to execute something in the present directory you
> should be do it explicitly, ./foo for example.
Usually what I want is to put a directory either first or last in the
path. (Herb is referring to having the current directory in the
middle of the path.)
To do this (and/or include other directories) I use a script with the
pathmunge function mentioned in http://tldp.org/LDP/Bash-Beginners-
Guide/html/sect_11_02.html. Perhaps this could be of use to you too.
Best,
Nestor Aguilera
------------------------- Helpful Info -------------------------
Mac-TeX Website: http://www.esm.psu.edu/mac-tex/
TeX FAQ: http://www.tex.ac.uk/faq
List Archive: http://tug.org/pipermail/macostex-archives/
List Reminders & Etiquette: http://www.esm.psu.edu/mac-tex/list/
More information about the macostex-archives
mailing list