Comment 7 for bug 70763

Looking at a git clone of the tcsh package from the debian upstream, the problem exists there too.

Here's a patch against the upstream file; could be just as easily applied to the ubuntu package as well. The patch also fixes the security issue raised by not calling ls by a complete path.