Konqueror - Advanced Permissions

[linkku]

Konqueror: Properties for a folder, Permissions-tab...Can't figer out what the Set UID and Set GID under Special in Advanced Permissions do. If you know, please explain and possibly give me an example. How does it differ from the normal ownerships. I got nothing after searching forums, the net and helpers. Also, is it true that a certain folder can only have one group and one owner?

Kiitti!
-Linkku

[Furball]

If you know, please explain and possibly give me an example

I'll try to explain it a bit:

If you have an executable file...
...and set the suid (set user id) bit: The file will NOT run with the permissions of the user who tries to run it but with the permissions of the user who owns this file
...and set the guid (set group id) bit: The same as suid but with groups
...and set the t bit (sticky bit): (deprecated) After termination of the process it will be kept within memory
An example:
ls -l /bin/bash gives you
-rwxr-xr-x 1 root root
If you run this command (start the bash) you will have the rights of your local user account. If the suid bit would be set and you start the bash you would have root rights becaue root is the owner of the file. (This is a method often used by rootkits and trojans) Setting the suid/guid can be very DANGEROUS so be careful if you need that ever.

Also, is it true that a certain folder can only have one group and one owner?

That's partially correct. However you can use ACLs to have a flexible rights managment (different groups/users with different rights). Try to search google "linux acl" or try "man getfacl" or "man setfacl" to find more about it. ACLs -however- are not supported on every filesystem !!

[tashirosgt]

The topics you search for on the web should be things like "suid" and "sticky bit" or "Unix file permissions". Suppose I have a command , like smbmnt. When I am an ordinary JoeUser and I run this command, it may need to do other things that only root can do. If we want JoeUser to be able to use this command we may set the permission on the file smbmnt to allow this. That is done by the "suid".

The web can probably explain "sticky bit" better than I can.