Le mercredi 27 juillet 2011 à 08:14 -0430, Robert Marcano a écrit :
appending helps a little, but if a security vulnerability allows a
intruder to put binaries on ~/bin, I think it will not be difficult to
overwrite .bash_profile (Unless something like SELinux is used to
protect startup shell script)
And I'm sure selinux people would love to secure $home except they can
only do it if its layout is fixed is stone. Which requires conventions
(like xdg) with no variability (unlike xdg)
--
Nicolas Mailhot