Am 12.08.2015 um 02:42 schrieb Thomas Daede:
*if* you use binary tarballs they *should not* be extracted in a user writeable location as *no binary* whenever possible should have permissions allowing a ordinary user to change them
This is simply not the way how end users install original Mozilla Firefox binaries.
In addition, if you have write access to ~/, you can also change .bashrc to add paths to executable files and do all sorts of other nasty things
that's why chattr exists
chattr +i ~/.bashrc chattr +i ~/.bash_profile
[root@rh:~]$ touch /home/harry/.bashrc touch: cannot touch '/home/harry/.bashrc': Permission denied