Re: Hard link creation witout write access

Martin Husemann <[email protected]> Thu, 7 Sep 2023 15:20:17 +0200

Newsgroups	gmane.os.netbsd.devel.security
Message-ID	<[email protected]>

On Thu, Sep 07, 2023 at 12:20:37PM +0000, RVP wrote:
> Then you can make private copies of setuid binaries which you can exploit
> at your leisure--even after the sysadmin's installed a new version. :)

Maybe we could add another knob: hardlink_check_suid, which is like the
other two combined but only for binaries with one of the s bits set,
and then make that default to on.

Martin