tech-security archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Re: Hard link creation witout write access



On Thu, Sep 07, 2023 at 12:20:37PM +0000, RVP wrote:
> Then you can make private copies of setuid binaries which you can exploit
> at your leisure--even after the sysadmin's installed a new version. :)

Maybe we could add another knob: hardlink_check_suid, which is like the
other two combined but only for binaries with one of the s bits set,
and then make that default to on.

Martin


Home | Main Index | Thread Index | Old Index