4 ms·

What are those risks?

• lisper 10y ago
  /usr/local/bin is a global resource. It is generally full of binaries that get run by many different users including root. If a regular user can replace those binaries the result is a privilege escalation.
  • stiGGG 10y ago
    which programs from /usr/local/bin get run by root under current macOS?
    • lisper 10y ago
      Well, by default /usr/local/bin is empty. But people commonly install things there that eventually get run by root. The most obvious example is various programming languages, different versions of Python, alternate shells, etc.