AF:
NF:0
PS:10
SRH:1
SFN:
DSR:
MID:<20091022171439.66d0cc0a@ripper.onstor.net>
CFG:
PT:0
S:andy.sharp@lsi.com
RQ:
SSV:mhbs.lsil.com
NSV:
SSH:
R:<Ed.Kwan@lsi.com>,<Andy.Sharp@lsi.com>,<escal@lsi.com>,<mtyson@css.glasshouse.com>,<Rich.LaReau@lsi.com>
MAID:2
X-Sylpheed-Privacy-System:
X-Sylpheed-Sign:0
SCF:#mh/Mailbox/sent
RMID:#imap/LSI/INBOX	0	2B044E14371DA244B71F8BF2514563F503FC0B59@cosmail03.lsi.com
X-Sylpheed-End-Special-Headers: 1
Date: Thu, 22 Oct 2009 17:16:13 -0700
From: Andrew Sharp <andy.sharp@lsi.com>
To: "Kwan, Ed" <Ed.Kwan@lsi.com>
Cc: "Sharp, Andy" <Andy.Sharp@lsi.com>, DL-ONStor-Escalation
 <escal@lsi.com>, "Tyson, Mark (Glasshouse)" <mtyson@css.glasshouse.com>,
 "Richard LaReau" <Rich.LaReau@lsi.com>
Subject: Re: Defect  Yes TED00027609 System copy all -i from console
 connection fails if logged in as admin SGI Japan
Message-ID: <20091022171613.4a26752d@ripper.onstor.net>
In-Reply-To: <2B044E14371DA244B71F8BF2514563F503FC0B59@cosmail03.lsi.com>
References: <e0a913e1-7799-4c02-a383-b1cbf15428e5@exch1.onstor.net>
	<2B044E14371DA244B71F8BF2514563F503FC0B59@cosmail03.lsi.com>
Organization: LSI
X-Mailer: Sylpheed-Claws 2.6.0 (GTK+ 2.8.20; x86_64-pc-linux-gnu)
Mime-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit

On Thu, 22 Oct 2009 18:07:04 -0600 "Kwan, Ed" <Ed.Kwan@lsi.com> wrote:

> Since the commands are run by root, they should have absolute path to
> be more secure.

It's considered less secure, because that static path can be "edited"
by certain kinds of exploits like stack overflows and string/array
overflows.

Also, what's with the borked email address for rich?

> -----Original Message-----
> From: andy.sharp@lsi.com [mailto:andy.sharp@lsi.com] 
> Sent: Thursday, October 22, 2009 5:03 PM
> To: DL-ONStor-Escalation
> Cc: Kwan, Ed; Sharp, Andy; Tyson, Mark (Glasshouse);
> Richard.LaReau@milmhbs0.lsil.com Subject: Defect Yes TED00027609
> System copy all -i from console connection fails if logged in as
> admin SGI Japan
> 
> company_name: SGI Japan
> id: TED00027609
> Headline: System copy all -i from console connection fails if logged
> in as admin State: Fixed
> Note_Entry: 
> The correct way to fix this is to fix the PATH environment variable
> for the admin user to include the right directories.
> 
> Release_Project: 4.0.2.6
> List_Incident_ID: 13523
> 
