On Fri, 2011-12-23 at 15:57 +0100, Reindl Harald wrote:
Am 23.12.2011 15:47, schrieb Aaron Konstam:
> On Thu, 2011-12-22 at 23:55 -0500, Richard Heck wrote:
>> On 12/22/2011 03:33 PM, Michael Cronenworth wrote:
>>> Richard Heck wrote:
>>>> When I do:
>>>> ls /bin/ping
>>>> I get "ping" displayed with black text on a red background. I
don't see
>>>> anything special about its permissions. What's up?
>>>
>>> Fedora switched[1] from using the suid-bit to capabilities. If you
>>> wish to see capabilities you can run "getcap" on the file.
>>>
>>> $ getcap /bin/ping
>>>
>>> [1]
http://fedoraproject.org/wiki/Features/RemoveSETUID
>>>
>> Thanks. I did eventually figure this out. Unfortunately, there doesn't
>> seem to be much documentation about this particular set of colors,
>> though it is reminiscent of what happens with e.g. mount and umount.
>
> I guess I am thick because I can't understand the explanation in the web
> page above. An example or two might have helped.
you need to understand what SETUID and CAPABILITIES are
what examples are you expecting? these are technics
http://en.wikipedia.org/wiki/Setuid
http://kernel.org/doc/man-pages/online/pages/man7/capabilities.7.html
Examples of a specific capability replaces a setuid. You web pages were
of more help.
--
=======================================================================
"In the long run, every program becomes rococo, and then rubble." --
Alan Perlis
=======================================================================
Aaron Konstam telephone: (210) 656-0355 e-mail: akonstam(a)sbcglobal.net