Bug#225692: A common setuid symlink issue, and possible patch to the bug

[Erno Kuusela <erno@iki.fi>]

| Shouldn't it be better if the code used in removal.c was re-used in 

after turning my brain on i remember what my original point about
needing to use fchmod was... the usual way to upgrade binaries in unix
is to use link() or rename() to replace them atomically. there also you
can use fchmod to change the permissions of the old inode (which might
still other links). if you just chmod the setuid bit away before doing
the replacement, there's window of time where you have a nonfunctional
binary in place.

  -- erno