[Full-Disclosure] Re: hard links on Linux create local DoS vulnerability and security problems
Seth Breidbart
sethb at panix.com
Mon Nov 24 19:47:53 GMT 2003
> I think that your observation of the ability to keep a security hole open is
> very interesting, but, fortunately, it should be moot.
Even if not, it's easily avoidable: when you replace a setuid program,
truncate the existing file first, then chmod 000, then delete it.
The security hole only remains if you merely delete it.
Seth
Full-Disclosure is hosted and sponsored by Secunia.