This allows users to share dotfiles between litterboxes. Of course, it can be used to gain malware persistence and access to other litterboxes, so users must be mindful of what they mount. This risk can be mitigated by mounting the volume or directory as read only and/or using the noexec option to prevent binaries from running, though bash totally-innocent-file.sh can still be used, however it's more difficult to type than say ./totally-innocent-file.sh.
This allows users to share dotfiles between litterboxes. Of course, it can be used to gain malware persistence and access to other litterboxes, so users must be mindful of what they mount. This risk can be mitigated by mounting the volume or directory as read only and/or using the noexec option to prevent binaries from running, though
bash totally-innocent-file.shcan still be used, however it's more difficult to type than say./totally-innocent-file.sh.