cross-platform virus

[John]

Peter Garrett wrote:
> On Sun, 09 Apr 2006 20:45:15 -0400
> Lee Revell <rlrevell at joe-job.com> wrote:
> 
> 
>>On Mon, 2006-04-10 at 08:23 +0800, John wrote:
>>
>>>If they have /usr/bin/VirusXXx then the battle's already won and lost.
>>>
>>>I'd be more worried about ~/bin/badstuff. 
>>
>>Is this really in the $PATH by default?  That seems like a problem.
>>
> 
> 
> In .bash_profile it seems to be commented out by default ( checked on a
> "new" user on my system)
> 
> # set PATH so it includes user's private bin if it exists
> #if [ -d ~/bin ] ; then
> #    PATH=~/bin:"${PATH}"
> #fi
> 
> Peter
> 

Anyone who can install ~/bin/badstuff can also modify any user files 
that can put ~/bin into $PATH, or create a desktop thingy that runs it 
from ~/bin/badstuff.