Re: Hard link creation witout write access

RVP <[email protected]> Thu, 7 Sep 2023 22:58:35 +0000 (UTC)
Newsgroups gmane.os.netbsd.devel.security
Message-ID <[email protected]>
On Thu, 7 Sep 2023, Martin Husemann wrote:

> Maybe we could add another knob: hardlink_check_suid, which is like the
> other two combined but only for binaries with one of the s bits set,
> and then make that default to on.
>

Actually, I'm OK with the current behaviour (which matches FreeBSD's): I
expect only a few programs which hard-link to files inside sticky or setuid
dirs. to be affected like this; and they can be taught to do a rename()
instead as I did for sort(1).

-RVP