On Sat, Jan 19, 2008 at 10:27:25AM -0800, Ted Unangst wrote:
> On 1/18/08, bofh <[EMAIL PROTECTED]> wrote:
> > I think he means sshd. And it really doesn't matter, once you make install,
> > you'll overwrite the vulnerable copy with the new one, and all the hardlinks
> > won't matter, because they'd be linked to the new file.
>
> except that they won't. the point of a hard link is it points to the
> file, not the name. it's not a symlink.
install(1) truncates and overwrites existing files, so the old end new
file will have the same inode, iirc.
-Otto
