Linked by Thom Holwerda on Mon 18th Aug 2008 23:33 UTC, submitted by Charles Wilson
Editorial GoboLinux is a distribution which sports a different file system structure than 'ordinary' Linux distributions. In order to remain compatible with the Filesystem Hierarchy Standard, symbolic links are used to map the GoboLinux tree to standard UNIX directories. A post in the GoboLinux forums suggested that it might be better to turn the concept around: retain the FHS, and then use symbolic links to map the GoboLinux tree on top of it. This sparked some interesting discussion. Read on for more details.
Permalink for comment 327278
To read all comments associated with this story, please click here.
RE[2]: Do we care? Really?
by Gunderwo on Tue 19th Aug 2008 04:50 UTC in reply to "RE: Do we care? Really?"
Gunderwo
Member since:
2006-01-03

Allowing a regular user to install anything that can be used by other users is a security concern.

For example, imagine there was a security bug in the font rendering library and someone has created a font that exploits that security bug to scan all accessible files for a user and look for Credit Card numbers. If you allow any user to install a global font every other user on the system can be affected, however if a user can only install fonts for themselves then only they can be affected.

Reply Parent Score: 6