Is it time to allow Chromium in Fedora?

Reindl Harald h.reindl at thelounge.net
Wed Aug 12 08:33:09 UTC 2015


Am 12.08.2015 um 02:42 schrieb Thomas Daede:
>>> *if* you use binary tarballs they *should not* be extracted in a user
>>> writeable location as *no binary* whenever possible should have
>>> permissions allowing a ordinary user to change them
>>
>> This is simply not the way how end users install original Mozilla
>> Firefox binaries.
>
> In addition, if you have write access to ~/, you can also change .bashrc
> to add paths to executable files and do all sorts of other nasty things

that's why chattr exists

chattr +i ~/.bashrc
chattr +i ~/.bash_profile

[root at rh:~]$ touch /home/harry/.bashrc
touch: cannot touch '/home/harry/.bashrc': Permission denied

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 181 bytes
Desc: OpenPGP digital signature
URL: <http://lists.fedoraproject.org/pipermail/devel/attachments/20150812/ea5b7cf2/attachment.sig>


More information about the devel mailing list