Am 12.08.2015 um 02:42 schrieb Thomas Daede:
*if* you use binary tarballs they *should not* be extracted in a user
writeable location as *no binary* whenever possible should have
permissions allowing a ordinary user to change them

This is simply not the way how end users install original Mozilla
Firefox binaries.

In addition, if you have write access to ~/, you can also change .bashrc
to add paths to executable files and do all sorts of other nasty things

that's why chattr exists

chattr +i ~/.bashrc
chattr +i ~/.bash_profile

[root@rh:~]$ touch /home/harry/.bashrc
touch: cannot touch '/home/harry/.bashrc': Permission denied

Attachment: signature.asc
Description: OpenPGP digital signature

-- 
devel mailing list
devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct

Reply via email to