Comment 22 for bug 64064

Revision history for this message
Evan Carroll (evancarroll) wrote :

I want to see it the default -- and your argument either makes no sense, or is so contrived as to be near useless. At least you disclaim the usefulness in the same response.

The first question you should ask, is what script can install with +x (so you can mistakingly execute them) and not just execute them itself? The home directory is owned, and grouped by the respective user of the directory by default. A non-user, non-group can only read files in home. So to install the files in ~/bin, you must be the USER or root. If a malicious script installs the files, presumably it has the user's permission, and after the permission level is compromised no amount of tomfoolery can make it all that much worse.