> more about). Since setuid is privilege escalation, then perhaps it > makes sense to allow it as an escape hatch. > > Would it be sane to just disallow setuid exec exclusively? I think that is a policy question. I can imagine cases where either behaviour is the "right" one so it may need to be a parameter ? Alan -- To unsubscribe from this list: send the line "unsubscribe linux-fsdevel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
