News for hackers. Stuff that matters.
Re:Unix Administration Horror Stories (1993) by ciupicri on Wednesday September 02, 2015 @10:12PM (#10163047)
If root's PATH environment variable can be compromised, then you might as well ditch the whole system.
Re:Unix Administration Horror Stories (1993) by dredmorbius on Wednesday September 02, 2015 @10:30PM (#10163090)
It may not be common practice (I typically rely on $PATH). But it is, as I noted, defensive.

There are numerous ways in which $PATH can change. Shared profiles and other users modifying root's init among them. Intent isn't necessarily malicious. It can still be unexpected.

Re:Unix Administration Horror Stories (1993) by rhinoceraptor on Wednesday September 02, 2015 @11:57PM (#10163273)
There was a Steam script that had a nasty habit of running '# rm /*' due to an empty script variable.
Re:Unix Administration Horror Stories (1993) by dredmorbius on Thursday September 03, 2015 @06:06AM (#10164086)
I do not trust vendor scripts.

Really fscking annoying: scripts that include inline binary data.