Re: hard links on Linux create local DoS vulnerability and security problems

["David F. Skoll" <dfs () roaringpenguin com>]

On Mon, 24 Nov 2003, Bruno Lustosa wrote:

> Just checked this on 2.6.0-test9, and it will not work.

[Keeping SUID bits by making a hard link.]

This is true even on ancient version of Linux and UNIX.

A hard link just contains a name and an inode number.  The permissions
are stored in the inode, so all hard links share the same permissions,
owner, etc.

--
David.