On Mon July 13 2009, Michal Hlavinka wrote:
if "su" (instead of "su -") is used, root will inherit user's environment including PATH.
So why should a malicious user be able to change the contents of ~/bin, but not set the variable PATH to an arbitrary value?
Regards Till