$HOME/.local/bin in $PATH

[Bruno Wolff III]

On Wed, Oct 30, 2013 at 19:15:11 +0100,
   Reindl Harald <h.reindl at thelounge.net> wrote:
>
>which is not possible at all, any application running with your
>user can write in your home directory and any security relevant
>bug in that application may result in changes

That doesn't have to be the case. selinux can be used to prevent some 
applications from doing that.