George Georgalis <george%galis.org@localhost> wrote:
> However, an audit of package hardlink count, warning on check,
> block on upgrade (without --force), to facilitate finding extra links,
> seems like a low cost sanity check?
It sure seems like it's the upgrade process that needs to care to remove
"old" suid bits on old executables. Or alternatively, overwrite them without
changing the inode. It's a tussle as to which is better.
--
] Never tell me the odds! | ipv6 mesh networks [
] Michael Richardson, Sandelman Software Works | IoT architect [
] mcr%sandelman.ca@localhost http://www.sandelman.ca/ | ruby on rails [
Attachment:
signature.asc
Description: PGP signature