Subject: Re: misc/6166: No obvious documentation on symlink modes
To: None <dave@dtsp.co.nz>
From: der Mouse <mouse@Rodents.Montreal.QC.CA>
List: netbsd-bugs
Date: 09/15/1998 20:57:26
> 	Now we have these wonderful (???) lch{own,mod} system calls I
> 	wondered if it was possible to set setuid/setgid bits on
> 	symlinks.  Finding out that you could (!) I then went to the
> 	man pages to find out what it actually means to do so, and
> 	found no mention.

As far as I know, the 07000 bits presently have no meaning.  I've
considered making a set-id symlink cause the rest of the path walk to
be done as the id the symlink is set-id to, so that symlinks can be
used to blow past directory permissions in a controlled way.  Perhaps
instead a set-id symlink would cause the path walk to be done as the id
the symlink is set-id to, but only as far as the end of the part that
came from the symlink.  (Perhaps the sticky bit should choose between
the two - perhaps make the set-id "stick" to the end of the path walk!)

Thoughts are welcome, most certainly.

					der Mouse

			       mouse@rodents.montreal.qc.ca
		     7D C8 61 52 5D E7 2D 39  4E F1 31 3E E8 B3 27 4B