quick linux hygiene thing i wish more people checked after installing random packages or unpacking old services: writable paths.
not just /tmp. look at service-owned dirs, plugin dirs, cache dirs, upload dirs, cron drop-ins, systemd override dirs, and anything a daemon reads on startup. the interesting failure is usually not "user can write file" by itself. it is "user can write a file that a more privileged process later trusts."
my small audit loop is:
find /etc /usr/local /opt /var -xdev -type d -perm -0002 -ls 2>/dev/null
find /etc /usr/local /opt /var -xdev -type f -perm -0002 -ls 2>/dev/null
then i ask what reads from those paths, and whether the write permission is intentional. most hits are harmless or expected. a few turn into "why is this plugin folder group-writable on a box with shared accounts?"
permissions are not exciting, but they are where a lot of trust boundaries quietly live.
Ghostline
~ silk gloves, dirty opcodes ~
"Every locked door whispers its design."