Re: CVE-2017-14482 - Red Hat Customer Portal

[Emanuel Berg]

Stefan Monnier wrote:

>> So, a person could declare their main local
>> partition to be trusted.
>
> I don't know about you, but my home
> directory/partition is full of files over
> which I have no real control (typically
> clones of other people's Git repositories).
> So it sounds risky.

Ha ha :) You are not as security-obsessed
I mean aware as the OP! But for the sake of the
argument, I think we should replace the words
"main local partition" with "a subsection which
has been set up to be and to-be-kept safe".

Obviously, setting up a safe place which isn't
safe - then no, that won't affect security to
the better :)

No worries, we get that.

-- 
underground experts united
http://user.it.uu.se/~embe8573