Here's my $PATH - 11.1 64-bit:

/opt/kde3/bin:/home/[username]/bin:/usr/local/bin:/usr/bin:/bin:/usr/bin/X11:/usr/X11R6/bin:/usr/games:/usr/lib/mit/bin:/usr/lib/mit/sbin:.:/usr/sbin:/usr/sbin

/usr/sbin is in there twice and . is in there too.

I always thought that . was not supposed to be included in the path for
security reasons.

Can't find any script in /etc/rc.d/* or /etc/init.d/* which adds . to
the path, and it's not in my ~/.bashrc, where else should I look?

I'm pretty sure that . was not in the path by default in 11.0.

Just checked on another user account and it has . in the path, but
/usr/sbin is only there once.

On Mon, 26 Oct 2009 01:17:01 +0000, Paul J Gans wrote:

I suspect that somebody has changed your path, and unless you log on as
root, not in a good way.

Am I getting mixed up with something else, or is there a setting in Yast
which says "add . to user path"? One could also check directly in the
relevant file in /etc/sysconfig.

Furthermore, checks should be made for the PATH variable (if using bash)
in the user's .bashrc and .profile files, as well as in the system
/etc/profile and etc/bashrc, and in the files under /etc/profile.d which
are sometimes added for configuring the enironment of specific
applications.

DenverD wrote:
AH! try this:

YaST > Security & Users > Local Security > click "Next" to
Miscellaneous Settings and find "Current Directory in root's Path" and
"Current Directory in Path of Regular Users" and UNcheck the box

OK. Current directory in root's path is NOT ticked.
Current directory in user's path IS ticked.

I've unticked it and it writes to the file /etc/sysconfig/suseconfig :

# Do you want to have "." in the path for normal users?
# Defaults to "yes" since this has been the case for years.
#
CWD_IN_USER_PATH="no"

So it's claiming that this has been the default for years...???? When I
started playing around with compiling madwifi in 10.3 I definitely had
to use ./ to run scripts, so . wasn't in the path then. Can't remember
for 11.0.

Also, File Permissions are set to Easy - I think my 10.3 and 11.0
installs had that also. Should I worry about this? This is a laptop that
only I use, with no holes in the firewall, no remote administration
enabled, etc.

i wonder, which of the four possible Security Settings (Home
Workstation, Networked Workstation, Network Server or Custom Settings)
was selected when you first arrived in the Local Security
Configuration dialog??

You mean, during install? Can't remember but it was probably Home
Workstation. I don't run any servers or shares so have no need to select
anything more than that.

and, i wonder if those two boxes (or either) is checked as the
default....hope not (but, on initial setup i clicked 'Custom' so i do
not know)

That would be interesting to know for sure.
I would have expected that a change like adding . to the path if a
certain install option is chosen, would be mentioned in the release
notes. Help in YaST says that having the . in the path is highly
dangerous, so I'd be surprised if it is the default. I can't remember if
I ticked this option manually at some point.

Ulick Magee wrote:
DenverD wrote:

So it's claiming that this has been the default for years...???? When I
started playing around with compiling madwifi in 10.3 I definitely had
to use ./ to run scripts, so . wasn't in the path then. Can't remember
for 11.0.

i do NOT remember that being the default "for years", or even months!!

Also, File Permissions are set to Easy - I think my 10.3 and 11.0
installs had that also. Should I worry about this? This is a laptop that
only I use, with no holes in the firewall, no remote administration
enabled, etc.

mine are easy....i figure if they can get close enough (in the
machine) they are smart enough to do as they will no matter what else
is done..

i wonder, which of the four possible Security Settings (Home
Workstation, Networked Workstation, Network Server or Custom Settings)
was selected when you first arrived in the Local Security
Configuration dialog??
You mean, during install? Can't remember but it was probably Home
Workstation. I don't run any servers or shares so have no need to select
anything more than that.

no, i meant when you first saw that page, today....when i saw mine it
said Custom (but, i remember doing that a long time ago)

but, yours is 'fixed' now, which is as it should be..

# Do you want to have "." in the path for normal users?
# Defaults to "yes" since this has been the case for years.
#
CWD_IN_USER_PATH="no"



So it's claiming that this has been the default for years...????

When I
started playing around with compiling madwifi in 10.3 I definitely had
to use ./ to run scripts, so . wasn't in the path then. Can't remember
for 11.0.

DenverD wrote:
AH! try this:

YaST > Security & Users > Local Security > click "Next" to
Miscellaneous Settings and find "Current Directory in root's Path" and
"Current Directory in Path of Regular Users" and UNcheck the box

OK. Current directory in root's path is NOT ticked.
Current directory in user's path IS ticked.

I've unticked it and it writes to the file /etc/sysconfig/suseconfig :

# Do you want to have "." in the path for normal users?
# Defaults to "yes" since this has been the case for years.
#
CWD_IN_USER_PATH="no"

So it's claiming that this has been the default for years...???? When I
started playing around with compiling madwifi in 10.3 I definitely had
to use ./ to run scripts, so . wasn't in the path then. Can't remember
for 11.0.

and, i wonder if those two boxes (or either) is checked as the
default....hope not (but, on initial setup i clicked 'Custom' so i do
not know)

That would be interesting to know for sure.
I would have expected that a change like adding . to the path if a
certain install option is chosen, would be mentioned in the release
notes. Help in YaST says that having the . in the path is highly
dangerous, so I'd be surprised if it is the default. I can't remember if
I ticked this option manually at some point.