Bug 120612

Summary:	"su" keeps user bin directory first in $PATH
Product:	[openSUSE] SUSE LINUX 10.0	Reporter:	Anders Johansson <ajohansson>
Component:	Basesystem	Assignee:	Dr. Werner Fink <werner>
Status:	RESOLVED INVALID	QA Contact:	E-mail List <qa-bugs>
Severity:	Major
Priority:	P5 - None	CC:	kukuk
Version:	Final
Target Milestone:	---
Hardware:	Other
OS:	All
Whiteboard:
Found By:	Other	Services Priority:
Business Priority:		Blocker:	---
Marketing QA Status:	---	IT Deployment:	---

Comment 1 Thorsten Kukuk 2005-10-06 12:37:51 UTC

Of couse you can never use plain "su" out of the box on someone else's
login safely and you never could. The solution is "su -".

Comment 2 Thorsten Kukuk 2005-10-06 12:38:39 UTC

*** Bug 120609 has been marked as a duplicate of this bug. ***

Comment 3 Anders Johansson 2005-10-06 12:46:00 UTC

That is not true. Up until 9.3 "su" reset $PATH to a secure value

Comment 4 Thorsten Kukuk 2005-10-06 13:02:38 UTC

Having a $PATH which looks clean does not mean the environment is "clean".
The difference between "su" and "su -" was/is not only overwriting the $PATH
variable.