Am 12.08.2015 um 02:42 schrieb Thomas Daede:
*if* you use binary tarballs they *should not* be extracted in a user writeable location as *no binary* whenever possible should have permissions allowing a ordinary user to change themThis is simply not the way how end users install original Mozilla Firefox binaries.In addition, if you have write access to ~/, you can also change .bashrc to add paths to executable files and do all sorts of other nasty things
that's why chattr exists chattr +i ~/.bashrc chattr +i ~/.bash_profile [root@rh:~]$ touch /home/harry/.bashrc touch: cannot touch '/home/harry/.bashrc': Permission denied
Attachment:
signature.asc
Description: OpenPGP digital signature
-- devel mailing list devel@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/devel Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
