the point is that *YOU* control where to bind stuff in your
own namespaces. if you do not trust that directory, then
do not bind it over /dev or /bin or any part where programs
expect some sanity. the fact that you see or not see the files
does not matter. say you take someones contrib directory and
bind it before /bin. then the people controlling that directory
can make files appear and disappear and replace your /bin/rc.

you also need to trust the hostowner of the machines you
do your computation on.

--
cinap

Reply via email to