Re: hardlinks to setuid binaries

On Fri, Mar 25, 2022 at 11:00:35PM +0000, Taylor R Campbell wrote:
> A heavier hammer, not requiring changes to pkg_delete or anything,
> would be to prohibit creating hard links to files with suid/sgid bits,
> and to prohibit setting the suid/sgid bits on files with >1 link.

Instead of prohibitting those, we could require them to be done by the suid
owner or root.

Martin