> That's another issue - symlinks always have mode lrwxrwxrwx,
> and nobody can change that, including root. So a "chmod -R"
> should just ignore symlinks
At one time, you were thinking of setuid symlinks.
Have you changed your mind? It would be nice to have
path traversal under another UID or GID while blocking
some users.
Unfortunately, the write bit is normally set.
Read permission is readlink and execute permission
allows following the symlink.