On Mon, Oct 2, 2017 at 1:02 PM, Mimi Zohar <zohar@xxxxxxxxxxxxxxxxxx> wrote: > On Mon, 2017-10-02 at 13:00 -0700, Matthew Garrett wrote: >> If /home is on the same filesystem as / (which is a pretty common >> case) then ln -f /usr/bin/a /home/bin/b will work just as well. > > Yes, assuming you have permissions on the running system. But if I don't have permissions, I can't just cut and paste security.evm either - even if I can write to security.evm, the only way the HMAC would match would be if I could change the ownership as well, which implies being root.
