Hi,

there is a long-standing bug in NetBSD that I think now is ripe
for at least a temporary fix until this can be done "right".  The
problem is "who should be the owner of a symlink"?  Currently the
owner is set to the owner of the directory where the symlink is
created.  This causes problems with directories which have the
sticky bit turned on (prominent example: /tmp), and opens up the
ability for twarthing disk quota systems (you may now "give away"
symlinks by the score if you have access to a writable directory
owned by the target victim).

It's not like fixes for this particular problem hasn't been
proposed -- suffice it to mention problem reports 576, 642 and
707 which all seem to pertain to this problem.  They also all
seem to be rather old, Nov94, Dec94 and Jan95 respectively, and
two of them are categorized as "serious/high"...

So, please, can a (temporary?) fix for this problem be
implemented?


Regards,

- H=E5vard