• Linux Netfilter tweaks for High traffic servers
    If you are serving a high traffic web/DNS server, and recently having PING loss to the server and not all HTTP request were successful to i...
  • md5sum csum fciv
    LINUX: md5sum fileName In Linux, the md5sum utility can be used: aemtux1:/ % md5sum binary.file 0c4627e70d168f7f78257e6dd01fdb60 binary.file...
  • Hardening the TCP/IP stack to SYN attacks
    How to detect a SYN attack It is very simple to detect SYN attacks. The netstat command shows us how many connections are currently in the h...

SUID, SGID, Sticky Bits, which one to use?


Summary:
drwxrwxrwt - Sticky Bits - chmod 1777
drwxrwsrwx - SGID set - chmod 2777
drwsrwxrwx - SUID set - chmod 4777

SUID:
The SUID permission makes a script to run as the user who is the owner of the script, rather than the user who started it.

SGID:
If a file is SGID, it will run with the privileges of the files group owner, instead of the privileges of the person running the program.

If a directory is SGID, it will inherits the privileges of the directory group owner.

Sticky Bits:
If the sticky bit is set for a directory, only the owner of that directory or the owner of a file can delete or rename a file within that directory.

Mostly use in /tmp folder

No comments:

Post a Comment

Subscribe to: Post Comments (Atom)