R0b0t1 wrote:
I'm not sure why you would suggest relying on $HOME might be a security issue.
For example, if I'm running a script that executes "rm -fr /special/dir/secret" and want to fool the script into not removing its secret file, I could simply run the script in an environment where HOME=/special/dir/secret.
