Special access control permissions in linux: stickybit, setuid, and setgid
Source: Internet
Author: User
In linux, the special access control permissions are stickybit, setuid, and setgid1.stickybit, also known as stricteddeletionbit, which are set to control the delete and Rename permissions of files in the directory. if a directory has stickybit, only the following three types of users can delete...
Special access control permissions in linux: sticky bit, setuid, setgid 1. sticky bit, also known as stricted deletion bit, is set on the directory to control the permission to delete and rename files in the directory. if a directory has sticky bit, only the following three types of users have the permission to delete files in the directory. 1) root users (not necessarily root users). 2) owner of the directory or owner3 of the files in the directory) A user with write permission on the file directory represents the permission of sticky bit. The value is 1.
2. setuid and setgid www.2cto.com are mainly used to set the setuid for executable files. when a file is executed, the setgid file has the permission of the file owner. when the file is executed, the setgid file has the permission of the file group to represent the setuid permission. 2 indicates the setgid permission number. 4. do not set setuid and setguid on the script file, it is said that hackers have many ways to use these two permission bits on the script to set these three permission bits by adding one before the original three permission bits, such as chmod 2755 file, to set the file setuid permission directly add chmod u + s file to add setuid permission to the file, chmod g + s file adds the setguid permission to the file. chmod o + s file adds the sticky bit permission to the directory.
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.
A Free Trial That Lets You Build Big!
Start building with 50+ products and up to 12 months usage for Elastic Compute Service