Re: Proposal: restrict link(2)
Marek Michalkiewicz (marekm@i17linuxb.ists.pwr.wroc.pl)
Mon, 16 Dec 1996 20:19:09 +0100 (MET)
Theodore Y. Ts'o:
> Someone in Devel can trivial give write access to Beta Report merely by
> leaving a setgid devel program in their homedirectory.
I don't see any good reasons why ordinary users should be allowed
to set set[ug]id bits. Perhaps that should be disallowed (at least
as an option)? Would it break any standards?
Marek