On a Linux machine, if we allowed the user
bob with home directory
/home/bob to put any content (malicious or not) into the file
-rw-r--r-- 1 root root 61K Aug 24 13:59 dangerfile.txt
Would this pose any security risk? Assuming that bob is not a root user, it seems like the only risk would be filling up the disk space if there wasn't a quota.
Motivation: In setting up a Docker container, I noticed that if you mapped a local volume, the resulting files would
root:root since they were created by the Docker daemon. Ignoring the other security shortcomings of Docker for the time, this question asks if
dangerfile.txt poses any risk to the system.