Re: Proposal: restrict link(2)

Richard Gooch (
Tue, 17 Dec 1996 15:36:10 +1100

Marek Michalkiewicz writes:
> Theodore Y. Ts'o:
> > Someone in Devel can trivial give write access to Beta Report merely by
> > leaving a setgid devel program in their homedirectory.
> I don't see any good reasons why ordinary users should be allowed
> to set set[ug]id bits. Perhaps that should be disallowed (at least
> as an option)? Would it break any standards?

Yikes! No!!!! There are good reasons why users should be able to set
the uid/gid bits on files they own (remember: set-uid is set to the ID
of the *owner* of the file, not necessarily set-uid to root).
This whole thread is getting ridiculous! People are beginning to
suggest disabling legitimate features left, right and centre!
Let's be a little more creative. Please.