Comment Comment by heisenbit Can anyone explain in what setup an attacker who can create a symlink where Chart.lock was could not directly write .bashrc or similar? Is this related to how Git handles symlinks? parent heisenbit 1 year ago