set-owner-ID-on-file and trusted mode

[Andreas Klaer]

Hello,

I need a s-bit on a file to have it executed with the owner's ID.
However, since the system has been converted to trusted mode I get prompted that "Setuid execution not allowed".
Is there a way to make this work? As I recognized /usr/sbin/passwd has the s-bit set, too.

Regards,

Andreas.

[Dan Hetzel · Accepted solution]

Hi Andreas,

Is your file on a NFS filesystem ?
If this is the case, the filesystem could be mounted with 'nosuid' flag.

Best regards,

Dan

[Christopher Caldwell]

nosuid,suid is a filesystem level priv (it's not just for NFS, vxfs and HFS have the nosuid,suid options)

It's also a user level priv (i.e. based on UID). See setprivgrp, getprivgrp and privgrp. Here's an excerpt from privgrp

PRIV_SETRUGID
Permits the use of the setuid() and setgid() system calls for changing respectively the real user ID and real group ID of a process (see setuid(2)).