; TeX output 2006.06.30:0206O! /DvipsToPDF { 72.27 mul Resolution div } def /PDFToDvips { 72.27 div Resolution mul } def /HyperBorder { 1 PDFToDvips } def /H.V {pdf@hoff pdf@voff null} def /H.B {/Rect[pdf@llx pdf@lly pdf@urx pdf@ury]} def /H.S { currentpoint HyperBorder add /pdf@lly exch def dup DvipsToPDF /pdf@hoff exch def HyperBorder sub /pdf@llx exch def } def /H.L { 2 sub dup /HyperBasePt exch def PDFToDvips /HyperBaseDvips exch def currentpoint HyperBaseDvips sub /pdf@ury exch def /pdf@urx exch def } def /H.A { H.L currentpoint exch pop vsize 72 sub exch DvipsToPDF HyperBasePt sub sub /pdf@voff exch def } def /H.R { currentpoint HyperBorder sub /pdf@ury exch def HyperBorder add /pdf@urx exch def currentpoint exch pop vsize 72 sub exch DvipsToPDF sub /pdf@voff exch def } def systemdict /pdfmark known not {userdict /pdfmark systemdict /cleartomark get put} if ps:SDict begin /product where{pop product(Distiller)search{pop pop pop version(.)search{exch pop exch pop(3011)eq{gsave newpath 0 0 moveto closepath clip/Courier findfont 10 scalefont setfont 72 72 moveto(.)show grestore}if}{pop}ifelse}{pop}ifelse}if endps:SDict begin [ /Title () /Subject () /Creator (LaTeX with hyperref package) /Author () /Producer (dvips + Distiller) /Keywords () /DOCINFO pdfmark end(b{color push Blackcolor push gray 0ps:SDict begin H.S endcolor push gray 0 color popps:SDict begin H.R endJps:SDict begin [ /View [/XYZ H.V] /Dest (page.1) cvn H.B /DEST pdfmark end color popG color popKPWps:SDict begin [ /Count -0 /Dest (section.1) cvn /Title (Introduzione) /OUT pdfmark endTps:SDict begin [ /Count -0 /Dest (section.2) cvn /Title (Copyright) /OUT pdfmark endXps:SDict begin [ /Count -0 /Dest (section.3) cvn /Title (Note Generali) /OUT pdfmark endOps:SDict begin [ /Count -0 /Dest (section.4) cvn /Title (Init) /OUT pdfmark endSps:SDict begin [ /Count -0 /Dest (section.5) cvn /Title (Il Login) /OUT pdfmark endSps:SDict begin [ /Count -2 /Dest (section.6) cvn /Title (Le Shell) /OUT pdfmark endTps:SDict begin [ /Count -0 /Dest (subsection.6.1) cvn /Title (Bash) /OUT pdfmark endTps:SDict begin [ /Count -0 /Dest (subsection.6.2) cvn /Title (tcsh) /OUT pdfmark enddps:SDict begin [ /Count -2 /Dest (section.7) cvn /Title (Cambiare l'ID dell'utente) /OUT pdfmark endRps:SDict begin [ /Count -0 /Dest (subsection.7.1) cvn /Title (su) /OUT pdfmark endTps:SDict begin [ /Count -0 /Dest (subsection.7.2) cvn /Title (sudo) /OUT pdfmark endYps:SDict begin [ /Count -5 /Dest (section.8) cvn /Title (Server di rete) /OUT pdfmark endUps:SDict begin [ /Count -0 /Dest (subsection.8.1) cvn /Title (inetd) /OUT pdfmark endSps:SDict begin [ /Count -0 /Dest (subsection.8.2) cvn /Title (rsh) /OUT pdfmark endVps:SDict begin [ /Count -0 /Dest (subsection.8.3) cvn /Title (rlogin) /OUT pdfmark endVps:SDict begin [ /Count -0 /Dest (subsection.8.4) cvn /Title (telnet) /OUT pdfmark endSps:SDict begin [ /Count -0 /Dest (subsection.8.5) cvn /Title (ssh) /OUT pdfmark endRps:SDict begin [ /Count -3 /Dest (section.9) cvn /Title (XFree86) /OUT pdfmark endSps:SDict begin [ /Count -0 /Dest (subsection.9.1) cvn /Title (XDM) /OUT pdfmark endYps:SDict begin [ /Count -0 /Dest (subsection.9.2) cvn /Title (Xterm -ls) /OUT pdfmark endrps:SDict begin [ /Count -0 /Dest (subsection.9.3) cvn /Title (Menu e pulsanti del window manager) /OUT pdfmark endhps:SDict begin [ /Count -2 /Dest (section.10) cvn /Title (Comandi ritardati: cron e at) /OUT pdfmark endUps:SDict begin [ /Count -0 /Dest (subsection.10.1) cvn /Title (cron) /OUT pdfmark endSps:SDict begin [ /Count -0 /Dest (subsection.10.2) cvn /Title (at) /OUT pdfmark endYps:SDict begin [ /Count -2 /Dest (section.11) cvn /Title (Alcuni esempi) /OUT pdfmark end\ps:SDict begin [ /Count -0 /Dest (subsection.11.1) cvn /Title (magicfilter) /OUT pdfmark endkps:SDict begin [ /Count -0 /Dest (subsection.11.2) cvn /Title (Stampare da applicazioni X) /OUT pdfmark endfps:SDict begin [ /Count -0 /Dest (section.12) cvn /Title (Problematiche di sicurezza) /OUT pdfmark endhps:SDict begin [ /Count -0 /Dest (section.13) cvn /Title (Come individuare i problemi?) /OUT pdfmark endps:SDict begin [ /Count -0 /Dest (section.14) cvn /Title (Alcuni strategie per avere lo stesso PATH per tutti gli utenti) /OUT pdfmark endZps:SDict begin [ /Count -0 /Dest (section.15) cvn /Title (Riconoscimenti) /OUT pdfmark endTps:SDict begin [ /Page 1 /View [ /Fit ] /PageMode /UseOutlines /DOCVIEW pdfmark end1ps:SDict begin [ {Catalog} << >> /PUT pdfmark endps:SDict begin H.S endps:SDict begin 13.68 H.A endMps:SDict begin [ /View [/XYZ H.V] /Dest (Doc-Start) cvn H.B /DEST pdfmark endpapersize=210mm,297mmgqGcmss17P_ATHOHOuNWTO cGUUK`y cmr10EsaT*urtiainen 33ٓRcmr7133&fes2bټe-mail:6giulioatUUplutodotit(Nff cmbx12Contents ps:SDict begin H.S endps:SDict begin 13.68 H.A endNps:SDict begin [ /View [/XYZ H.V] /Dest (section*.1) cvn H.B /DEST pdfmark end񢍍color push rgb 0 0 1ps:SDict begin H.S end"V cmbx101In9troQduzioneps:SDict begin 13.68 H.L endops:SDict begin [ /Subtype /Link /Dest (section.1) cvn /H /I /Border [0 0 0] /Color [1 0 0] H.B /ANN pdfmark end color popI2ؽcolor push rgb 0 0 1ps:SDict begin H.S end2Cop9yrightps:SDict begin 13.68 H.L endops:SDict begin [ /Subtype /Link /Dest (section.2) cvn /H /I /Border [0 0 0] /Color [1 0 0] H.B /ANN pdfmark end color popI2color push rgb 0 0 1ps:SDict begin H.S end3NoteTGeneralips:SDict begin 13.68 H.L endops:SDict begin [ /Subtype /Link /Dest (section.3) cvn /H /I /Border [0 0 0] /Color [1 0 0] H.B /ANN pdfmark end color popI3color push rgb 0 0 1ps:SDict begin H.S end4Initps:SDict begin 13.68 H.L endops:SDict begin [ /Subtype /Link /Dest (section.4) cvn /H /I /Border [0 0 0] /Color [1 0 0] H.B /ANN pdfmark end color popI4color push rgb 0 0 1ps:SDict begin H.S end5IlTLoginps:SDict begin 13.68 H.L endops:SDict begin [ /Subtype /Link /Dest (section.5) cvn /H /I /Border [0 0 0] /Color [1 0 0] H.B /ANN pdfmark end color popI4color push rgb 0 0 1ps:SDict begin H.S end6LeTShellps:SDict begin 13.68 H.L endops:SDict begin [ /Subtype /Link /Dest (section.6) cvn /H /I /Border [0 0 0] /Color [1 0 0] H.B /ANN pdfmark end color popI5ؼcolor push rgb 0 0 1ps:SDict begin H.S end6.1Bashps:SDict begin 13.68 H.L endtps:SDict begin [ /Subtype /Link /Dest (subsection.6.1) cvn /H /I /Border [0 0 0] /Color [1 0 0] H.B /ANN pdfmark end color pop>8..................................................mcolor push Black5m color popcolor push rgb 0 0 1ps:SDict begin H.S end6.2tcshps:SDict begin 13.68 H.L endtps:SDict begin [ /Subtype /Link /Dest (subsection.6.2) cvn /H /I /Border [0 0 0] /Color [1 0 0] H.B /ANN pdfmark end color pop>8..................................................mcolor push Black6m color popؽcolor push rgb 0 0 1ps:SDict begin H.S end7Cam9biareTl'IDdell'utenteps:SDict begin 13.68 H.L endops:SDict begin [ /Subtype /Link /Dest (section.7) cvn /H /I /Border [0 0 0] /Color [1 0 0] H.B /ANN pdfmark end color popI6color push rgb 0 0 1ps:SDict begin H.S end7.1sups:SDict begin 13.68 H.L endtps:SDict begin [ /Subtype /Link /Dest (subsection.7.1) cvn /H /I /Border [0 0 0] /Color [1 0 0] H.B /ANN pdfmark end color pop6q...................................................mcolor push Black6m color popcolor push rgb 0 0 1ps:SDict begin H.S end7.2sudops:SDict begin 13.68 H.L endtps:SDict begin [ /Subtype /Link /Dest (subsection.7.2) cvn /H /I /Border [0 0 0] /Color [1 0 0] H.B /ANN pdfmark end color pop>8..................................................mcolor push Black7m color popcolor push rgb 0 0 1ps:SDict begin H.S end8Serv9erTdireteps:SDict begin 13.68 H.L endops:SDict begin [ /Subtype /Link /Dest (section.8) cvn /H /I /Border [0 0 0] /Color [1 0 0] H.B /ANN pdfmark end color popI7color push rgb 0 0 1ps:SDict begin H.S end8.1inetdps:SDict begin 13.68 H.L endtps:SDict begin [ /Subtype /Link /Dest (subsection.8.1) cvn /H /I /Border [0 0 0] /Color [1 0 0] H.B /ANN pdfmark end color pop>8..................................................mcolor push Black7m color popcolor push rgb 0 0 1ps:SDict begin H.S end8.2rshps:SDict begin 13.68 H.L endtps:SDict begin [ /Subtype /Link /Dest (subsection.8.2) cvn /H /I /Border [0 0 0] /Color [1 0 0] H.B /ANN pdfmark end color pop6q...................................................mcolor push Black7m color popcolor push rgb 0 0 1ps:SDict begin H.S end8.3rloginps:SDict begin 13.68 H.L endtps:SDict begin [ /Subtype /Link /Dest (subsection.8.3) cvn /H /I /Border [0 0 0] /Color [1 0 0] H.B /ANN pdfmark end color popE.................................................mcolor push Black8m color popcolor push rgb 0 0 1ps:SDict begin H.S end8.4telnetps:SDict begin 13.68 H.L endtps:SDict begin [ /Subtype /Link /Dest (subsection.8.4) cvn /H /I /Border [0 0 0] /Color [1 0 0] H.B /ANN pdfmark end color popE.................................................mcolor push Black8m color popcolor push rgb 0 0 1ps:SDict begin H.S end8.5sshps:SDict begin 13.68 H.L endtps:SDict begin [ /Subtype /Link /Dest (subsection.8.5) cvn /H /I /Border [0 0 0] /Color [1 0 0] H.B /ANN pdfmark end color pop6q...................................................mcolor push Black8m color popcolor push rgb 0 0 1ps:SDict begin H.S end9XF ree86ps:SDict begin 13.68 H.L endops:SDict begin [ /Subtype /Link /Dest (section.9) cvn /H /I /Border [0 0 0] /Color [1 0 0] H.B /ANN pdfmark end color popI8color push rgb 0 0 1ps:SDict begin H.S end9.1XDMps:SDict begin 13.68 H.L endtps:SDict begin [ /Subtype /Link /Dest (subsection.9.1) cvn /H /I /Border [0 0 0] /Color [1 0 0] H.B /ANN pdfmark end color popE.................................................mcolor push Black8m color popcolor push rgb 0 0 1ps:SDict begin H.S end9.2XtermUU-lsps:SDict begin 13.68 H.L endtps:SDict begin [ /Subtype /Link /Dest (subsection.9.2) cvn /H /I /Border [0 0 0] /Color [1 0 0] H.B /ANN pdfmark end color popU獍...............................................mcolor push Black9m color popcolor push BlackG color pop*ps:SDict begin /product where{pop product(Distiller)search{pop pop pop version(.)search{exch pop exch pop(3011)eq{gsave newpath 0 0 moveto closepath clip/Courier findfont 10 scalefont setfont 72 72 moveto(.)show grestore}if}{pop}ifelse}{pop}ifelse}if end(b{color push Blackcolor push gray 0ps:SDict begin H.S endcolor push gray 0 color popps:SDict begin H.R endJps:SDict begin [ /View [/XYZ H.V] /Dest (page.2) cvn H.B /DEST pdfmark end color popG1.In9troQduzione~E2G color popKP덍color push rgb 0 0 1ps:SDict begin H.S end9.3MenuUUepulsantidelwindowmanagerps:SDict begin 13.68 H.L endtps:SDict begin [ /Subtype /Link /Dest (subsection.9.3) cvn /H /I /Border [0 0 0] /Color [1 0 0] H.B /ANN pdfmark end color pop8"................................mcolor push Black9m color popؽcolor push rgb 0 0 1ps:SDict begin H.S end10ComandiTritardati:pcroneatps:SDict begin 13.68 H.L endpps:SDict begin [ /Subtype /Link /Dest (section.10) cvn /H /I /Border [0 0 0] /Color [1 0 0] H.B /ANN pdfmark end color popI9ؼcolor push rgb 0 0 1ps:SDict begin H.S end10.1cronps:SDict begin 13.68 H.L endups:SDict begin [ /Subtype /Link /Dest (subsection.10.1) cvn /H /I /Border [0 0 0] /Color [1 0 0] H.B /ANN pdfmark end color pop>8..................................................mcolor push Black9m color popcolor push rgb 0 0 1ps:SDict begin H.S end10.2atps:SDict begin 13.68 H.L endups:SDict begin [ /Subtype /Link /Dest (subsection.10.2) cvn /H /I /Border [0 0 0] /Color [1 0 0] H.B /ANN pdfmark end color pop6q...................................................mcolor push Black10m color popcolor push rgb 0 0 1ps:SDict begin H.S end11AlcuniTesempips:SDict begin 13.68 H.L endpps:SDict begin [ /Subtype /Link /Dest (section.11) cvn /H /I /Border [0 0 0] /Color [1 0 0] H.B /ANN pdfmark end color popAK10color push rgb 0 0 1ps:SDict begin H.S end11.1magic lterps:SDict begin 13.68 H.L endups:SDict begin [ /Subtype /Link /Dest (subsection.11.1) cvn /H /I /Border [0 0 0] /Color [1 0 0] H.B /ANN pdfmark end color popU獍...............................................mcolor push Black10m color popcolor push rgb 0 0 1ps:SDict begin H.S end11.2StampareUUdaapplicazioniXps:SDict begin 13.68 H.L endups:SDict begin [ /Subtype /Link /Dest (subsection.11.2) cvn /H /I /Border [0 0 0] /Color [1 0 0] H.B /ANN pdfmark end color popT.....................................mcolor push Black10m color popcolor push rgb 0 0 1ps:SDict begin H.S end12Problematic9heTdisicurezzaps:SDict begin 13.68 H.L endpps:SDict begin [ /Subtype /Link /Dest (section.12) cvn /H /I /Border [0 0 0] /Color [1 0 0] H.B /ANN pdfmark end color popAK11color push rgb 0 0 1ps:SDict begin H.S end13ComeTindividuareiproblemi?ps:SDict begin 13.68 H.L endpps:SDict begin [ /Subtype /Link /Dest (section.13) cvn /H /I /Border [0 0 0] /Color [1 0 0] H.B /ANN pdfmark end color popAK11color push rgb 0 0 1ps:SDict begin H.S end14AlcuniTstrategiepQera9vereTlostessoP ATHTpertuttigliuten9tips:SDict begin 13.68 H.L endpps:SDict begin [ /Subtype /Link /Dest (section.14) cvn /H /I /Border [0 0 0] /Color [1 0 0] H.B /ANN pdfmark end color popAK12color push rgb 0 0 1ps:SDict begin H.S end15Riconoscimen9tips:SDict begin 13.68 H.L endpps:SDict begin [ /Subtype /Link /Dest (section.15) cvn /H /I /Border [0 0 0] /Color [1 0 0] H.B /ANN pdfmark end color popAK13ps:SDict begin H.S endps:SDict begin 13.68 H.A endMps:SDict begin [ /View [/XYZ H.V] /Dest (section.1) cvn H.B /DEST pdfmark endƍ1LIntros3duzione׍QuestodoGcumentodescrivetrucchieproblemicomunipGerlevqariabilid'ambientediUnix/Linux,ˑinpar- ticolare˓pGerla˔vqariabileP*ATH.˓PATHXGeunalista˔didirectoryincuiilsistemacercaicomandi.ԁIudettagliriguardanoUUladistribuzioneDebianLinux1.3.ؼNota:qquestoUUdoGcumento8GeinversionebGeta.qSonograditecorrezioniecommenti.ps:SDict begin H.S endps:SDict begin 13.68 H.A endMps:SDict begin [ /View [/XYZ H.V] /Dest (section.2) cvn H.B /DEST pdfmark end2LCopyrightThisidoGcumentationiisfreedocumentation;syouicanredistributeiitand/ormodifyitiunderthetermsoftheGNUEGeneralEPublicELicenseaspublishedbytheF*reeSoftwareEFoundation;KeitherEversionE2oftheLicense,orUU(atyouroption)anylaterversion.ؼThisdoGcumentationisdistributedinthehopGethatitwillbGeuseful,butWITHOUTANYWARRANTY;withouteventheimpliedwarrantyofMERCHANT*ABILITYorFITNESSFORAP*ARTICULARPUR-POSE.UUSeetheGNUGeneralPublicLicenseformoredetails.Y*ouLshouldLhavereceivedLacopyLoftheGNULGeneralPublicLicensealongwiththisdoGcumentation;Oifnot,writeUUtotheF*reeSoftwareUUFoundation,Inc.,675MassAve,Cambridge,MA02139,USA.color push BlackG color pop>ps:SDict begin /product where{pop product(Distiller)search{pop pop pop version(.)search{exch pop exch pop(3011)eq{gsave newpath 0 0 moveto closepath clip/Courier findfont 10 scalefont setfont 72 72 moveto(.)show grestore}if}{pop}ifelse}{pop}ifelse}if end(b{color push Blackcolor push gray 0ps:SDict begin H.S endcolor push gray 0 color popps:SDict begin H.R endJps:SDict begin [ /View [/XYZ H.V] /Dest (page.3) cvn H.B /DEST pdfmark end color popG3.NoteTGeneraliwH3G color popKPps:SDict begin H.S endps:SDict begin 13.68 H.A endMps:SDict begin [ /View [/XYZ H.V] /Dest (section.3) cvn H.B /DEST pdfmark end 3LNoteffGenerali׍T*uttiRiRproGcessiUnixcontengonoun"ambiente".iQuesto GeRunalistadivqariabilichecontengonoRnomee rispGettivoh_vqalore,!entrambih^sottoformadistringhechepGossonocontenerelamaggiorpartedeicaratteri.OgniproGcessoUnixhaunprocessopadrechelohacreato.M;Unprocesso glioeredital'ambientedalprocessopadrehedgessostessopuofaredellemoGdi chealproprioambientehpGerpoihpassareasuavoltataleambientemoGdi catoUUai gli.ؼUna.vqariabiled'ambiente/impGortanteGe.P*ATH,unalista/didirectoryseparatedacaratteriduepunti(':').IlRsistemacercainquestedirectoryQpGertrovqareicomandidaeseguire.SesiprovqaadinvoGcareilcomando"foGo",Cil?ksistema?lcercaun leeseguibile(conpGermessidiesecuzione)dinome"foGo"intutteledirectorychetrovqaUUinP*ATH,UUnell'ordineincuivisonoscritte.qSeun ledelgenere8Getrovqatoessovieneeseguito.Inpmquestohowtousopliltermine"comando"riferendomiadunprogrammaeseguibilechesiintendeinvoGcareattraversoUUquestomeccanismo(senzafornireilpGercorsocompleto).InpLinuxpanchelechiamatepdisistemadibassolivellocheservonopadavviareipproGcessi(lafamigliadichiamateexec)*Jcercanogli*IeseguibilinelledirectoryindicatenellavqariabileP*ATH:*Jsipuousareilmeccanismodipathovunqueg ognigvoltachegsiprovqaadgeseguireuncomando."YSeunachiamatadisistema"exec"hapGerargomentounmnomemdi lechenoncontieneilcarattere'/'ilsistemaprovqaadusarelavqariabiled'ambienteP*ATH.mSenell'ambientenonGepresentetalevqariabilel'eseguibilevienecercato(almeno)nelledirectory/bine/usr/bin.In-Wsh-Xvieneutilizzatoilcomando"expGort"per-Ximpostareuna-Xvqariabiled'ambiente,5Wincsh-Wilcomandoequiv-alente8GeUU"setenv".qAdesempio:sh:卍color push Black color popcolor push Black color popߤN cmtt9PATH=/usr/local/bin:/usr/bin:/bin:/usr/bin/X11:/usr/games:.ؼcsh:color push Black color popcolor push Black color popsetenvPATH/usr/local/bin:/usr/bin:/bin:/usr/bin/X11:/usr/games:.IprogrammiCpGossonousarelafunzionedilibreriasetenv()pGermodi carel'ambiente.SInPerll'ambiente Gecontenutonell'arrayassoGciativo%ENVX,P*ATHYpuoessereimpGostatasemplicementeadesempiocosq$ENV !", cmsy10fP*ATHg="/bin".ؼIlcomando"env"kGeilmoGdopiusemplicedivisualizzarelevqariabilid'ambientecorrenti.^EssopuoessereusatoUUanchepGermodi carle.Ulterioriinformazionisulmeccanismodell'ambientesonocontenutenellepaginedelmanuale"environ","execl",UU"setenv",nel leinfo"env"enelladoGcumentazionedelleshell.All'avviodiLinux,MYilprimoproGcessonormalechevieneavviatoԡGeinit.xEunproGcessoparticolare,MXperchGenonMhaMunpadre,O"matuttiglialtriproGcessiderivqanodaesso.o2L'ambienteMdiinityGequellochetuttiiproGcessiavrebbGeroUUsenonmodi casseroilproprioambiente,UUmalamaggiorpartefaqualchecambiamento.InitfapartireungruppGodiproGcessi.Il le/etc/inittabdicealsistemaqualiproGcessieseguire.QuestiproGcessi+;giranoin+:unambiente+;direttamenteereditatodainit,`tipicamente+:sonoproGcessicome"getty",`ilprogramma4chescrive"login:"sulla3console.dSesifapartireunaconnessionePPP)aquestopunto,lbisognacolor push BlackG color pop\1ps:SDict begin /product where{pop product(Distiller)search{pop pop pop version(.)search{exch pop exch pop(3011)eq{gsave newpath 0 0 moveto closepath clip/Courier findfont 10 scalefont setfont 72 72 moveto(.)show grestore}if}{pop}ifelse}{pop}ifelse}if end(b{color push Blackcolor push gray 0ps:SDict begin H.S endcolor push gray 0 color popps:SDict begin H.R endJps:SDict begin [ /View [/XYZ H.V] /Dest (page.4) cvn H.B /DEST pdfmark end color popG4.Inits4G color popKPricordare?chesi>stalavorandonell'ambientediinit.L'inizializzazionedelsistema}"GespGesso>unoscriptfatto partirein questafase.InDebian1.3loscriptdiinizializzazione8Ge/etc/init.d/rcechiamaaltriscriptasuavolta.ؼIlsistemacontienemoltiserver(demoni)chepGossonoononpGossonoutilizzarel'ambienteprede nito.OPLamaggiorUUpartedeiserversonofattipartiredagliscriptdiinizializzazioneequindihannol'ambientediinit.Nel[emomento[fincuil'utente[faccedealsistema,l'ambienteHGe[fin uenzatodalleimpGostazionicompilateneiprogrammi,٘dagli$script#diinizializzazionedelsistemaedagliscriptdiinizializzazionespGeci cidell'utente.xE'un'meccanismoabbastanza'complicatoelasituazionecorrentenonGedeltuttosoGddisfacente.bPer'l'utentecambiaUUtuttotrailfareillogindaconsoletestuale,daXDModarete.ps:SDict begin H.S endps:SDict begin 13.68 H.A endMps:SDict begin [ /View [/XYZ H.V] /Dest (section.4) cvn H.B /DEST pdfmark end4LInit׍Init,GesilsproGcessopadredituttiglialtriproGcessidelsistema.uGlialtriproGcessiereditanol'ambientedelproGcessoiniteilloropathBvGeilpathiniziale,neiraricasiincuinonvieneimpGostatounaltropath.Ilpathprede nitoUU("initpath")8GecompilatonelcoGdicesorgentedelprogrammainitedGe:卍color push Black color popcolor push Black color pop/usr/local/sbin:/sbin:/bin:/usr/sbin:/usr/binؼSiUUnotichel'initpathnoncontiene/usr/loGcal/bin.T*uttininprogrammielencatiin/etc/inittablavranonell'ambientendiinit,tOinparticolaregliscrpitdiinizializ-zazioneUUdelsistemain/etc/init.d(Debian1.3).T*uttopciopchevieneavviatopdagliscriptdiinizializzazionedelsistemahapGerambientepprede nitoquellodiinit.Ad! esempiosyslogd,Skerneld,pppGd! (sefattipartire! all'avvio),Sgpme! soprattuttolpGde! inetdhannol'ambienteUUdiinitenonlocambiano.Un|grupGo|diprogrammi5qGefattopartiredagliscriptdiavvio,]malavqariabiled'ambiente|P*ATH5gGeimpGostataesplicitamenteUUnelloscriptdiavvio.qAdesempiocosqfannoatd,sendmail,apacheesquid.Ci'ysono'zaltriprogrammifattipartiredascriptdiavviomaessicambianoilpathcompletamente;unodiquesti8GeUUcron.ps:SDict begin H.S endps:SDict begin 13.68 H.A endMps:SDict begin [ /View [/XYZ H.V] /Dest (section.5) cvn H.B /DEST pdfmark end5LIlffLogin׍In+unaconsoledi+testoc'Geunprogramma,4 getty*,4cheaspGettache+l'utentefacciaillogin.cEssoscrive"login:"e^altrimessaggi.3Lavora^nell'ambientedi]init.3Quandounutentesiautentica,getty]invoGcailprogramma"login".qEssoUUimpGostal'ambienteUUutenteeinvoGcalashell.Il programmaloginimpGostaP*ATHsecondo quantode nitoin/usr/include/paths.h.HPerl'utenteroGotquestipGercorsiUUsonodiversidaquellideglialtriutenti.pGerUUgliutenticomuni(ffP*ATHffDEFPATH):卍color push Black color popcolor push Black color pop/usr/local/bin:/usr/bin:/bin:.color push BlackG color popops:SDict begin /product where{pop product(Distiller)search{pop pop pop version(.)search{exch pop exch pop(3011)eq{gsave newpath 0 0 moveto closepath clip/Courier findfont 10 scalefont setfont 72 72 moveto(.)show grestore}if}{pop}ifelse}{pop}ifelse}if end(b{color push Blackcolor push gray 0ps:SDict begin H.S endcolor push gray 0 color popps:SDict begin H.R endJps:SDict begin [ /View [/XYZ H.V] /Dest (page.5) cvn H.B /DEST pdfmark end color popG6.LeTShellhv5G color popKPpGerUUroot(ffP*ATHffDEFPATHffROOT):卍color push Black color popcolor push Black color pop/sbin:/bin:/usr/sbin:/usr/binؼIlpathdiunutentecomunenoncontienenessunadirectorysbin.:T*uttaviaessocontieneladirectorycorrente '.',NMchefGeconsideratapGericolosaperl'utenteroot.ONemmenoladirectory/usr/local/binfGedisponibileperl'utenteUUroGot.ؼIltP*ATHsottenutotalmomentodelloginvienespGessotsostituitodaquellode nitonegliscriptdiinizializzazionedelleݼshell.IComunqueGepGossibileusareݽaltriprogrammiin/etc/passwdcomeshellpGerl'utente.IAdesempio,iot3housatolat4seguenterigapGerfarpartirePPPt+quandoaccedoalsistemaconunnomeutentespGeciale.aInquestoUUcaso,pppGdhaesattamenteilP*ATHUUde nitoalmomentodellogin.卍color push Black color popcolor push Black color popetu-ppp:viYabVlxPwzDl:1000:1000:EsaTurtiainen,PPP:/:/usr/sbin/pppdps:SDict begin H.S endps:SDict begin 13.68 H.A endMps:SDict begin [ /View [/XYZ H.V] /Dest (section.6) cvn H.B /DEST pdfmark endƍ6LLeffShell׍SpGessoiprocessidell'utentesono glidellashellmenzionatain/etc/passwdperquelparticolareutente.MI leUUdiinizializzazionedelleshellspGessomodi canolavqariabileP*ATH.Al`login,$ilnomedellaashellACGepreceduto`dalcarattere'-',#adesempiobashACGechiamata"-bash". QuestopGerindicareallashellcheGeunashelldilogin(loginshell).Intalcaso,blashelleseguei lediinizializzazionerichiesti#3dallogin.`Altrimentieseguequalcheinizializzazione#2menoimpGegnativqa.aInpiu#2lashellcontrollaseessastessaGeinterattivqaecioGeseicomandivengonoda leodaterminaletty*.rAnchecioin uiscesull'inizializzazione,cosicchGeunashellnoninterattivqaenondiloginvieneinizializzatamoltopGoco(bashnonesegueUUalcuncoGdicediinizializzazioneintalecaso).~6ps:SDict begin H.S endps:SDict begin 13.68 H.A endRps:SDict begin [ /View [/XYZ H.V] /Dest (subsection.6.1) cvn H.B /DEST pdfmark endjN cmbx126.1BashNSeavviatacomenormaleloginshell,bashleggeil leglobale/etc/pro le,dovepuoesserespGeci catol'ambienteҎdisistemaeҏlavqariabileP*ATH.ҎTuttavia,1tale lenonvieneconsideratoҏseilsistemainter-preta2la3shellcomenoninterattivqa. _IlcasopiGuimportanteAGe3quellodirsh,incuiuncomandoAGeeseguitoinunaUUmacchinacomunicante.qIl le/etc/pro lenonvienelettoeP*ATH8GeUUereditatadaldemonersh.BashJricevedallarigadicomandogliargomenti-loginIe-ichepGossonoessereusatirispettivqamenteperimpGostareUUlashellrispettivqamentecomeloginshelloshellinterattivqa.L'utentepuosostituireivqaloriimpGostatiin/etc/pro lecreandoun le~/.bashffpro le,9~/.bashfflogino~/.pro le. VSinotichesoloilprimodiquestivieneeseguito,_hdeviandodallalogicadellaconvenzionaleinizializzazione"dicsh.`~/.bashffloginnon"vieneeseguitoinmanieraparticolarepGerleloginshelleseesisteil leUU.bashffpro leessononvieneeseguitoa atto!SeEsiusabashconilEnome"sh"inveceEdelnome"bash",Hilprogrammaemulal'inizializzazionedellaBourneshellUUoriginale:qleggesoloi ledicon gurazione/etc/pro lee~/.pro leesolopGerleloginshell.color push BlackG color popps:SDict begin /product where{pop product(Distiller)search{pop pop pop version(.)search{exch pop exch pop(3011)eq{gsave newpath 0 0 moveto closepath clip/Courier findfont 10 scalefont setfont 72 72 moveto(.)show grestore}if}{pop}ifelse}{pop}ifelse}if end(b{color push Blackcolor push gray 0ps:SDict begin H.S endcolor push gray 0 color popps:SDict begin H.R endJps:SDict begin [ /View [/XYZ H.V] /Dest (page.6) cvn H.B /DEST pdfmark end color popG7.Cam9biareTl'IDdell'utente>]6G color popKPps:SDict begin H.S endps:SDict begin 13.68 H.A endRps:SDict begin [ /View [/XYZ H.V] /Dest (subsection.6.2) cvn H.B /DEST pdfmark end 6.2tcshNSeUUeseguitacomeloginshell,tcsheseguei lenelseguenteordine:ؼcolor push Black color pop/etc/csh.cshrccolor push Black color pop/etc/csh.logincolor push Black color pop~/.tcshrccolor push Black color pop~/.cshrcUU(if.tcshrcisnotfound)color push Black color pop~/.historycolor push Black color pop~/.logincolor push Black color pop~/.cshdirsSiUUnotichetcshpuoesserecompilatapGereseguirescriptdiloginprimadegliscriptcshrc.ؼLe/Nshell/Mnoninterattive/Neseguonosologliscript*cshrc.eGliscript*loginpGossonoessereusatipGerimpostare P*ATHUUsolounavoltaalmomentodellogin.ps:SDict begin H.S endps:SDict begin 13.68 H.A endMps:SDict begin [ /View [/XYZ H.V] /Dest (section.7) cvn H.B /DEST pdfmark end7LCambiareffl'IDdell'utente ps:SDict begin H.S endps:SDict begin 13.68 H.A endRps:SDict begin [ /View [/XYZ H.V] /Dest (subsection.7.1) cvn H.B /DEST pdfmark end j7.1suNIl/~comandosuservepGercambiare/l'iddell'utente.e*SenonaGespGeci catonessunidperargomento,7vieneusatoroGot.NormalmentesuinvoGcaunasubshellcomeloginshellconunuseriddi erenteeconargomento'-'(sinonimipiGurecentisono-lo{login).|T*uttaviaessononfausodelprogrammaloginpGerfarecioedutilizzaancoraunUUaltroP*ATHUUdi erentepGer"simulare"illogin.qQuestoP*ATH8Ge:pGerUUutentinormali卍color push Black color popcolor push Black color pop/usr/local/bin:/usr/bin:/bin:/usr/bin/X11:.ؼpGerUUl'utenterootcolor push Black color popcolor push Black color pop/sbin:/bin:/usr/sbin:/usr/bin:/usr/bin/X11:/usr/local/sbin:/usr/local/binsuUUappGortamoltialtricambiamentiUUcomplessiall'ambiente.color push BlackG color popCps:SDict begin /product where{pop product(Distiller)search{pop pop pop version(.)search{exch pop exch pop(3011)eq{gsave newpath 0 0 moveto closepath clip/Courier findfont 10 scalefont setfont 72 72 moveto(.)show grestore}if}{pop}ifelse}{pop}ifelse}if end(b{color push Blackcolor push gray 0ps:SDict begin H.S endcolor push gray 0 color popps:SDict begin H.R endJps:SDict begin [ /View [/XYZ H.V] /Dest (page.7) cvn H.B /DEST pdfmark end color popG8.Serv9erTdiretey7G color popKPps:SDict begin H.S endps:SDict begin 13.68 H.A endRps:SDict begin [ /View [/XYZ H.V] /Dest (subsection.7.2) cvn H.B /DEST pdfmark end 7.2sudoNEsisteDungruppGoCdicomandichefausodeicomandidelsupGerutenteinmanierapiGusicura.2Questiprevedono unAamigliormeccanismoA`dilogin,E_restrizionibasatesull'identitadell'utenteeA`l'usodipasswordindividuali.k IlpiGuUUusato8Gesudo.Upcolor push Black color popcolor push Black color pop$sudoenvyGesegueUUilcomandoenvcomesupGerutente(se8q> 33133&fes2bٲcon guratopGerpermetterlo).ؼIlcomandosudohaancoraunaltroapproGcciodiversoallagestionediP*ATH.Essomodi calastrategiadiricercaxneixpGercorsifacendoinmoGdocheladirectorycorrentesiasempreesaminatapGerultima. ComunquenonamoGdi calavqariabileP*ATHa|inasGe. "sudoenv"e"env"restituisconolostessovqalorepGerlavariabileP*ATH.UUSudoaggiungesolounpaiodivqariabilid'ambienteUUcomeSUDOffUSER.nps:SDict begin H.S endps:SDict begin 13.68 H.A endMps:SDict begin [ /View [/XYZ H.V] /Dest (section.8) cvn H.B /DEST pdfmark end8LServerffdirete׍La maggior partedeiserverdiretenondovrebbGeinvoGcaresottoprocessi dialcuntipGo.9YPermotividisicurezzailUUP*ATHditaliserverdovrebbGeessereminimale.Un'eccezioneimpGortante riguardatuttiiservizichepGermettonodifareillogindelsistemadallarete.DZQuestasezionerdescrivelastrutturadell'ambientesinquesticasi.0&Seilcomandovieneeseguitosullamacchinaremota,il suoP*ATHEGe diversoasecondachesistiautilizzandorshossh.AllostessomoGdofareilloginconrlogin,T*elnetUUosshproGducediversirisultati.[Jps:SDict begin H.S endps:SDict begin 13.68 H.A endRps:SDict begin [ /View [/XYZ H.V] /Dest (subsection.8.1) cvn H.B /DEST pdfmark end.8.1inetdNLaCmaggiorCpartedeiserverdiretenonhaproGcessipropricheattendonolerichieste.=.QuestocompitoGedelegato:adunsupGerserverchiamatoinetd.";Inetd:ascoltatuttelepGortespeci cateefapartireilserverappropriatoUUquandoriceveunarichiesta.qQuestocompGortamento8Gede nitoin/etc/inetd.conf.inetd5GeQavviatoRdagliscriptdiinizializzazionedelsistema.NEssoereditasoloilP*ATH7delRproGcessoinit,nonlomoGdi ca5etuttiiserverfatti5partiredainetdhannol'initpath.gDUnesempioditaleserverGeimapGd,<ilserverdelUUprotoGcolloIMAP*.AltriUUesempidiproGcessiinetdsonotelnetd,rlogind,talkd,ftp,popd,moltiserverhttpecosqvia.SpGessoDff>FPATHffDEFPATH(/usr/include/paths.h),che]GelostessoP*ATHcheusailUUprogrammaloginpGergliutenticomuni.qRoGotavralostesoP*ATHUUdiunutentenormale.InUUrealta,rshdesegueilcomandocheglivienefornitodarigadicomando:color push BlackG color popps:SDict begin /product where{pop product(Distiller)search{pop pop pop version(.)search{exch pop exch pop(3011)eq{gsave newpath 0 0 moveto closepath clip/Courier findfont 10 scalefont setfont 72 72 moveto(.)show grestore}if}{pop}ifelse}{pop}ifelse}if end(b{color push Blackcolor push gray 0ps:SDict begin H.S endcolor push gray 0 color popps:SDict begin H.R endJps:SDict begin [ /View [/XYZ H.V] /Dest (page.8) cvn H.B /DEST pdfmark end color popG9.XF ree86˲8G color popKP덍color push Black color popcolor push Black color popshell-ccommand-line)֍e"shell"quinonQGeunaloginshell.#-x<Edesiderabilechetutteleshellmenzionatein/etc/passwdsuppGortino l'opzioneUU-cdarigadicomando.Mps:SDict begin H.S endps:SDict begin 13.68 H.A endRps:SDict begin [ /View [/XYZ H.V] /Dest (subsection.8.3) cvn H.B /DEST pdfmark end.8.3rloginNRlogin IinvoGca Jloginpereseguirela Jveraproceduradilogin.YSesiesegueil Jlogindarlogin,siottienelastessavqariabileP*ATHcheconlogin.Q7LamaggiorpartedeglialtrimoGdiperfareilloginsuunamacchinaLinuxnonusaUUlogin.qSinotiladi erenzaconrsh.ؼPerUUlaprecisioneilcomandologinusato8Gecolor push Black color popcolor push Black color poplogin-p-hhost-nameuser-name-p&preservqa%l'ambiente,$ctrannele&vqariabiliHOME,P*ATH,&SHELL,TERM,MAILeLOGNAME.-hindicailnomeUUdell'hostremotosucuifareillogin.Mps:SDict begin H.S endps:SDict begin 13.68 H.A endRps:SDict begin [ /View [/XYZ H.V] /Dest (subsection.8.4) cvn H.B /DEST pdfmark end.8.4telnetNT*elnet̹Gesimilearlogin.[EssousailprogrammaloginelarigadicomandopGerinvocarloinmanieraanaloga.ps:SDict begin H.S endps:SDict begin 13.68 H.A endRps:SDict begin [ /View [/XYZ H.V] /Dest (subsection.8.5) cvn H.B /DEST pdfmark end8.5sshNsshIhaIunacon gurazionediP*ATHI}tuttaIsua.mHaunP*ATHI|precompilatoIacuiaggiungeladirectoryincui siUUtrovqassh.qCiospGessosigni cache/usr/bin8GepresenteduevoltenelP*ATH:color push Black color popcolor push Black color pop/usr/local/bin:/usr/bin:/bin:.:/usr/bin)֍IlUUpathnoncontiene/usr/X11/binelashellinvoGcatadalcomandosshnon8Geunaloginshell.qQuindicolor push Black color popcolor push Black color popsshremotehostxtermnon%funzionamaie&qualunquecosasiascrittain/etc/pro lee/etc/csh.cshrcnonpuocambiarequestasituazione.qSiUUdevesempreusareilpGercorsospeci co/usr/bin/X11/xterm.ؼsshƧcercaƨdellevqariabilid'ambientenellaƧformaVARIABILE=VALOREƊnel leƧ/etc/environment.žSfortu-natamenteUUciocausaqualcheproblemaconXF*ree86.a)ps:SDict begin H.S endps:SDict begin 13.68 H.A endMps:SDict begin [ /View [/XYZ H.V] /Dest (section.9) cvn H.B /DEST pdfmark end9LXFfree86 ps:SDict begin H.S endps:SDict begin 13.68 H.A endRps:SDict begin [ /View [/XYZ H.V] /Dest (subsection.9.1) cvn H.B /DEST pdfmark end j9.1XDMNXDMGeXilmoGdoXpiuXcomunediaccedereadunterminalegra co.cx|EXsimileinaspGettoalogin,mailsuofunzionamentoUUinterno8Gedeltuttodi erente.color push BlackG color pop 0ps:SDict begin /product where{pop product(Distiller)search{pop pop pop version(.)search{exch pop exch pop(3011)eq{gsave newpath 0 0 moveto closepath clip/Courier findfont 10 scalefont setfont 72 72 moveto(.)show grestore}if}{pop}ifelse}{pop}ifelse}if end(b{color push Blackcolor push gray 0ps:SDict begin H.S endcolor push gray 0 color popps:SDict begin H.R endJps:SDict begin [ /View [/XYZ H.V] /Dest (page.9) cvn H.B /DEST pdfmark end color popG10.ComandiTritardati:pcroneat(jg9G color popKPNellak6directory/etc/X11/xdmcik5sonodei ledicon gurazionechesonoeseguitiinfasidiversedell'opGerazione dilogin.2xXstartup(eXstartupff0spGeci camenteperloscreen0)contienecomandichevqannofattipartiredopGoUUchel'utentehafattoillogin(talicomandisonofattigirareconiprivilegidiroGot).ؼIlUUP*ATHchevieneimpGostatopergliutenti8Gein/etc/X11/xdm/xdm-con g.qCisonorighe:卍color push Black color popcolor push Black color popDisplayManager*userPath:/usr/local/bin:/usr/bin:/bin:/usr/bin/X11:/usr/games =DisplayManager*systemPath:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/bin/X11ؼcheindicherannounP*ATHprede nitopGerutentinormalieperrootrispettivqamente.˟xEmoltoimportanteche/usr/bin/X11siadispGonibilepergliutentidiX.SeunutentediXfailloginsuun'altramacchinapGerfarpartireun'applicazioneX,dovrebbGeottenere/usr/bin/X11all'internodelsuoP*ATHanchesenonsembravenireUUdirettamentedalterminaleX.DopGoaverfattopartirexstartupXDMfapartire/etc/X11/XsessionchefGefattopartireconiprivilegidell'utenteps nale. !Lacon gurazioneloGcale)VGepensataperesserefattain/etc/environment,:chepsvieneletto-(incluso)da-Xsession,%sequest'ultimoGedispGonibile(Xsessionvieneeseguitoda/bin/shequindi/etc/environmentdeveessereun lepGersh).SQuestasceltavqaincon ittoconquelladissh, chesuppGoneche/etc/environmentUUsiaun lechecontienerigheformattatecomeVARIABILE=VALORE.~6ps:SDict begin H.S endps:SDict begin 13.68 H.A endRps:SDict begin [ /View [/XYZ H.V] /Dest (subsection.9.2) cvn H.B /DEST pdfmark endj9.2Xterm-lsNIlP*ATHprede nitopGertuttiicomandiinvoGcatidaimenudelwindowmanagerXoGeilP*ATHereditatodaXDM.!Sesivuoleusareunaltro!P*ATH!Vbisogna!spGeci carloesplicitamente.ePer!farpartireunemulatoredi{terminale{conunP*ATH{che{sia"normale"bisognausarequalcheopzioneparticolare.yInxtermdeveessere\usatal'opzione-ls(login\shell)pGerottenereunaloginshellconP*ATH\Cspeci cato\comenei lediinizializzazioneUUdellogin.ps:SDict begin H.S endps:SDict begin 13.68 H.A endRps:SDict begin [ /View [/XYZ H.V] /Dest (subsection.9.3) cvn H.B /DEST pdfmark end.9.3MenuepulsantidelwindowmanagerIlZ%windowmanagerZ$eredital'ambientediXDM.T*uttiZ$iprogrammichevengonofattiZ$partiredalwindowmanagerUUereditanol'ambienteUUdelwindowmanager.ؼL'ambiente>della?shelldell'utentenonin uenzaiprogrammichesonofattipartiredamenuedapulsantidelwindowmanager.ZOPeresempio,seunprogrammaGefattopartireda"xterm-ls",hal'ambienteprede nitodiunaUUshelldilogin,mase8Gefattopartiredamenuhasolol'ambientedelwindowmanager.ps:SDict begin H.S endps:SDict begin 13.68 H.A endNps:SDict begin [ /View [/XYZ H.V] /Dest (section.10) cvn H.B /DEST pdfmark end10 fdComandiffritardati:32croneat ps:SDict begin H.S endps:SDict begin 13.68 H.A endSps:SDict begin [ /View [/XYZ H.V] /Dest (subsection.10.1) cvn H.B /DEST pdfmark end j10.1%cronCronGeuncomandocheeseguealtricomandipGeriodicamentecomespGeci catoin/etc/crontabealtricrontabde nitiQ%dall'utente.pbInDebian1.3esisteunmeccanismostandardQ&pGereseguireicomandiin/etc/cron.daily*,/etc/cron.weeklyUUe/etc/cron.monthly*.color push BlackG color pop ?ps:SDict begin /product where{pop product(Distiller)search{pop pop pop version(.)search{exch pop exch pop(3011)eq{gsave newpath 0 0 moveto closepath clip/Courier findfont 10 scalefont setfont 72 72 moveto(.)show grestore}if}{pop}ifelse}{pop}ifelse}if end(b{color push Blackcolor push gray 0ps:SDict begin H.S endcolor push gray 0 color popps:SDict begin H.R endKps:SDict begin [ /View [/XYZ H.V] /Dest (page.10) cvn H.B /DEST pdfmark end color popG11.AlcuniTesempim 10G color popKPCronGeʽfattopartiredascriptdiʼbGootʽmasembracambiareilproprioP*ATHʟconʽunʼunP*ATHabbastanza strano:卍color push Black color popcolor push Black color pop/usr/bin:/binn:/sbin:/bin:/usr/sbin:/usr/binؼQUESTO0xIEIPROBABILMENTEUNBUGDICRON.JIQuesto-GeJJilP*ATHdiJJinitsuJIcuivienescritto/usr/bin:/binUUsenzailcaratterediterminazionen0!qQuestobugnon8Gepresentesututtiisistemi.ؼIncrontabcipGossonoesserede nizionidiP*ATH.InDebian1.3c'Gelaseguenterigadidefaultall'iniziodi/etc/crontab:color push Black color popcolor push Black color popPATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/binؼPropriopGerquesto,'ilP*ATH~delprogrammacrondnonvienemaiusatoneiprogrammidell'utente.^T*uttigliscriptnelledirectory/etc/cron.*prendonoquestoP*ATHcomeprede nito.^Questo\GeilP*ATHusatoancheseUUunprogramme8GeeseguitodaunutentesenzaiprivilegidiroGot.ps:SDict begin H.S endps:SDict begin 13.68 H.A endSps:SDict begin [ /View [/XYZ H.V] /Dest (subsection.10.2) cvn H.B /DEST pdfmark end.10.2%atNat8GeUUuncomandochepuoessereusatopGerfargirareunprogrammainunmomentospGeci co.ؼatdutilizzailP*ATHediinit. STuttavia,9iprogrammidell'utentesonosemprefattigirarenell'ambientedell'utente1facendo1usodelcomandosh.eQuindisiapplicanolesoliteregoledelleshell.eSivedalasezionesubash.ps:SDict begin H.S endps:SDict begin 13.68 H.A endNps:SDict begin [ /View [/XYZ H.V] /Dest (section.11) cvn H.B /DEST pdfmark endƍ11 fdAlcuniffesempi ps:SDict begin H.S endps:SDict begin 13.68 H.A endSps:SDict begin [ /View [/XYZ H.V] /Dest (subsection.11.1) cvn H.B /DEST pdfmark endS11.1%magic ltermagic lterŽGe un toGolcomuneper manipolare leperla stampante.VEssoanalizza iltipodel lechedeveessereK3stampatoeinvoGcaK3unoscript ltrochesioccupadellasuaformattazione.nfQuestiscriptsonoinvocatidalQlpGd,rche%4Gefattopartireda/etc/init.d/lpdcheasuavolta%3Gefattopartiredainit.Quindiilpath%4equellodiUUinit.qChenoncontiene/usr/bin/X11!ؼSi4pGotrebbe4volerinserireilsuppGortoper4lastampa4dei lePDF4pGermagic lter.MxfE4possibile4fareciousando/usr/bin/X11/xpGdf.˗BisognaȚricordarsidiinserireilțpercorsocompletodel leperchGețmagic lterȚnonsarainc7gradoc8ditrovqarloaltrimenti.nLamaggiorc7partedeiprogrammiusatidamagic lternonhabisognodispGeci careUUunpercorsocompleto,perchGeUUsitrovqain/binoin/usr/bin.~6ps:SDict begin H.S endps:SDict begin 13.68 H.A endSps:SDict begin [ /View [/XYZ H.V] /Dest (subsection.11.2) cvn H.B /DEST pdfmark endj11.2%StamparedaapplicazioniXSipuousarelavqariabiled'ambientePRINTERpGervisualizzarelastampanteutilizzazta. T*uttavia,~sipGotrebbeUUnotarecheinalcunicasiinapplicazioniXtalevqariabiletalvolta8Gemancante.color push BlackG color pop ps:SDict begin /product where{pop product(Distiller)search{pop pop pop version(.)search{exch pop exch pop(3011)eq{gsave newpath 0 0 moveto closepath clip/Courier findfont 10 scalefont setfont 72 72 moveto(.)show grestore}if}{pop}ifelse}{pop}ifelse}if end(b{color push Blackcolor push gray 0ps:SDict begin H.S endcolor push gray 0 color popps:SDict begin H.R endKps:SDict begin [ /View [/XYZ H.V] /Dest (page.11) cvn H.B /DEST pdfmark end color popG12.Problematic9heTdisicurezza-R11G color popKPBisognaricordarsicheselasessioneXlGefattapartiredaXDM,ilwindowmanagernonhaavutomoGdodi vqalutare&gli&scriptdilogindellashell.bT*utteleapplicazioniX&chesonostatefattepartiredaxtermhannolavqariabileqPRINTER.Maselastessaapplicazionevienefattapartiredamenuodaunpulsantedelwindowmanager,UUessanoncontienelavqariabilePRINTER.ؼIn)\alcuni)[casiquestocompGortamentopuoesserederivqatodaunlayer)\ancorainferiore:[adesempiounplugindiUUNetscapGepuoavereUUoppurenolade nizionedellavqariabilePRINTER.ps:SDict begin H.S endps:SDict begin 13.68 H.A endNps:SDict begin [ /View [/XYZ H.V] /Dest (section.12) cvn H.B /DEST pdfmark end12 fdProblematicheffdisicurezza׍P*ATH1(puo11provoGcaredeirilevqantiproblemi10disicurezza.eUnmoGdomoltocomunepGerutentinonautorizzatidiӡaccedereӢadunsistemaGequellodisfruttaredeglierrorinell'impGostazionediP*ATH.xӡEӁfacilepGerpetrareattacchi ditipGotro8janhorseseuncrackerriesceafareinmoGdocheroGotounaltroutenteeseguaunasuaversioneUUdeicomandi.Unosbagliocomunenelpassato(?)I eraquelloditenere'.'I nelP*ATHdiroGot.I UncrackerpGotrebbecreareunUUprogramma"ls"nellasuahomedirectory*.qSeroGotesegue:卍color push Black color popcolor push Black color pop#cd~cracker =#lsؼesegueUUilcomandolsdelcracker.IndirettamenteciosiapplicaatuttiiprogrammichevengonoeseguiticomeroGot. hySeunaltroutentepuoΞscriveresuΝun le,quel lenondovrebbGeΝesseremaieseguitodanessunproGcessodemoneimportante.Inwalcunisistemi/usr/loGcal/bincontieneprogrammiacuivengonoapplicaticontrollidisicurezzamenoseveri,.vienesemplicementerimossodalP*ATHϰdell'utenteroGot.TuttaviaGerisaputochealcunidemonieseguono"foGo"usandoilP*ATH"/usr/local/bin/:...";Gepossibile"imbrogliare"ildemonefacendoglieseguire"/usr/loGcal/bin/foo"oalpGostondi"/bin/foo".<2xUEEprobabilechechiunquepGossanscriveresu"/usr/loGcal/bin"pGossaUUancheentraresenzaautorizzazionenelsistema.xE)molto)impGortante)considerareinqualeordineledirectorysonoelencateinP*ATH.Se)/usr/loGcal/binvieneprimaFdiE/bincitroviamodifronteadunrischiopGerlasicurezzadelsistema,|sevienedopGononO)GepiGupossibilesostituireUUilcomando/bin/foGoconqualcheversioneloGcalizzatain/usr/local/bin/foo.BisognaricordarecheinLinuxlavqalutazionedelP*ATH|Geeseguitaallivellodellechiamatedisistema.DovunqueѧciѨsiaun leeseguibilevienefornitounP*ATHцinѧcuivienericercatounnome(seessononcontieneilUUpGercorsocompleto)almenonelledirectory/bine/usr/bineprobabilmenteancheinmoltealtrecartelle.ps:SDict begin H.S endps:SDict begin 13.68 H.A endNps:SDict begin [ /View [/XYZ H.V] /Dest (section.13) cvn H.B /DEST pdfmark end/ƍ13 fdComeffindividuareiproblemi?׍IlUUcomandodibasepGervisualizzarel'ambiente8GeUU/usr/bin/env.xE hpGossibile {usare zladirectory/proc zpercercare zilP*ATH hdi {qualunqueprogramma.YPrimabisognaconoscereilbonumerobpdelproGcesso(siusipspGerquest'ultimo).Peresempio,eseilnumerobpdelproGcessodixtermSGe1088,siUUpuocontrollareilsuoambienteconilcomandocolor push BlackG color pop ps:SDict begin /product where{pop product(Distiller)search{pop pop pop version(.)search{exch pop exch pop(3011)eq{gsave newpath 0 0 moveto closepath clip/Courier findfont 10 scalefont setfont 72 72 moveto(.)show grestore}if}{pop}ifelse}{pop}ifelse}if end(b{color push Blackcolor push gray 0ps:SDict begin H.S endcolor push gray 0 color popps:SDict begin H.R endKps:SDict begin [ /View [/XYZ H.V] /Dest (page.12) cvn H.B /DEST pdfmark end color popG14.AlcuniTstrategiepQera9vereTlostessoP ATHTpertuttigliuten9ti012G color popKP덍color push Black color popcolor push Black color pop#more/proc/1088/environؼQuestononfunzionaconproGcessidemonecomexdm.OTPeraccedereall'ambientediproGcessidisistemaoaltri proGcessiUUdell'utentesonorichiestiiprivilegidiroGot.ؼPerUUfareildebugdiNetscapGe,sipuocreareunoscript/tmp/test:卍color push Black color popcolor push Black color pop$cat>/tmp/test =#!/bin/sh/usr/bin/env>/tmp/env^d$chmod+x/tmp/testPoisipuoimpGostareunplugin,ladesempioRealAudio,maudio/x-pn-realaudiopGerfareinmoGdochechi- amipilpprogramma"/tmp/test". PQuandosicliccherasudeilinkRealAudio(adesempioqualcosadahttp://www.realaudio.com/showcase),*lNetscapGe̜chiamera̛ilprogrammadummychescrive̜l'ambientein/tmp/env.ps:SDict begin H.S endps:SDict begin 13.68 H.A endNps:SDict begin [ /View [/XYZ H.V] /Dest (section.14) cvn H.B /DEST pdfmark end/ƍ14 fdAlcuniffstrategieps3eraverefflostessoPfATHffpertuttigliutenti׍La'piGu'importanteopzionedicon gurazione'alriguardositrovqa'nei lediinizializzazioneglobaledelleshellpGerUUleloginshell:q/etc/csh.loginpertcshe/etc/pro leperbash.ؼEccezionizche{nonottengonoilP*ATHbcorrettodazquesti lesonoicomandirsh,icomandissh,levoGcidelmenudelwindowmanagerXchenonfannopartireesplicitamenteunaloginshell,HMicomandiinvoGcatidainittab,UUitaskdicron,iproGcessichevengonoavviatidademonicomelprd,gliscriptCGIecosqvia.Se)5ilP*ATH Ge)5impGostatoin)4/etc/csh.cshrc,2 lavqariabileP*ATH))viene)5de nitacorrettamenteanchequandorshossheseguonouncomandosuunamacchinaremotaconunaccountcheutilizzatcsh/csh.#ZT*uttavianonIiGepGossibileUUfarelastessacosasel'accountusabash/sh.xEȕpGossibileȳcombinareȲleimpostazionidelP*ATHȕinȲunȳ le,adesempionel le/etc/environment-common.QuiUUpGossiamoscrivere:卍color push Black color popcolor push Black color pop${EXPORT}PATH${EQ}/bin:/usr/bin:/sbin:/usr/sbin:/usr/bin/X11:/usr/local/bin:/usr/games:.ؼQuestoUUpuoessereusatoda/etc/csh.login(pGertcshecsh)color push Black color popcolor push Black color popsetEQ=""setEXPORT="setenv"source/etc/environment-commonEUUda/etc/pro le(pGerbash,nonfunzionapersh)color push Black color popcolor push Black color popEQ='='EXPORT="export"./etc/environment-commonEUUda/etc/environmentUU(pGerXDM)color push BlackG color pop ps:SDict begin /product where{pop product(Distiller)search{pop pop pop version(.)search{exch pop exch pop(3011)eq{gsave newpath 0 0 moveto closepath clip/Courier findfont 10 scalefont setfont 72 72 moveto(.)show grestore}if}{pop}ifelse}{pop}ifelse}if end(b{color push Blackcolor push gray 0ps:SDict begin H.S endcolor push gray 0 color popps:SDict begin H.R endKps:SDict begin [ /View [/XYZ H.V] /Dest (page.13) cvn H.B /DEST pdfmark end color popG15.Riconoscimen9tig13G color popKP덍color push Black color popcolor push Black color popEQ="="EXPORT="export"./etc/environment-commonؼQuesta8strategiafunziona8lamaggiorpartedellevoltemasshavraqualcosadaridireriguardoallerighe contenutein/etc/environment(eriguardoallevqariabilid'ambienteEQeEXPOR*T).EcomunqueicomandirshUUeseguiticonbashnonavrannotaleP*ATH.ps:SDict begin H.S endps:SDict begin 13.68 H.A endNps:SDict begin [ /View [/XYZ H.V] /Dest (section.15) cvn H.B /DEST pdfmark end15 fdRiconoscimenti׍UnaragionepGercominciareascriverequestodocumentojGestatalafortepressionediAriMujunen.a]JuhaT*akqalaUUmihafornitoalcunivalidicommenti.color push BlackG color pop;(G N cmbx12ߤN cmtt9"V cmbx10Nff cmbx12m#R cmss10