Setgid - Revision history

Jimbo: changing setgid and seteuid to redirect to setuid

2005-03-16T16:11:38Z

changing setgid and seteuid to redirect to setuid

Dave at 19:50, 15 March 2005

2005-03-15T19:50:11Z

Dave at 19:18, 15 March 2005

2005-03-15T19:18:46Z

New page

[[setgid]] (and it's brothers, [[setuid]] and [[seteuid]]) are all system calls that a program can use to change the group ID, user ID and effective user ID (respectively.)

From the man page for setuid:

The setuid() system call sets the real and effective user IDs and the
saved set-user-ID of the current process to the specified value. The
setuid() system call is permitted if the specified ID is equal to the
real user ID or the effective user ID of the process, or if the effective
user ID is that of the super user.

The setgid() system call sets the real and effective group IDs and the
saved set-group-ID of the current process to the specified value. The
setgid() system call is permitted if the specified ID is equal to the
real group ID or the effective group ID of the process, or if the effec-
tive user ID is that of the super user.

The seteuid() system call (setegid()) sets the effective user ID (group
ID) of the current process. The effective user ID may be set to the
value of the real user ID or the saved set-user-ID (see intro(2) and
execve(2)); in this way, the effective user ID of a set-user-ID exe-
cutable may be toggled by switching to the real user ID, then re-enabled
by reverting to the set-user-ID value. Similarly, the effective group ID
may be set to the value of the real group ID or the saved set-group-ID.

[[Category:FreeBSD Terminology]]

@@ Line 1: / Line 1: @@
-[[setgid]] (and it's brothers, [[setuid]] and [[seteuid]]) are all system calls that a program can use to change the group ID, user ID and effective user ID (respectively.)
+#REDIRECT [[Setuid]]
-−
-From the man page for setuid:
-−
-     The setuid() system call sets the real and effective user IDs and the
-     saved set-user-ID of the current process to the specified value.  The
-     setuid() system call is permitted if the specified ID is equal to the
-     real user ID or the effective user ID of the process, or if the effective
-     user ID is that of the super user.
-−
-     The setgid() system call sets the real and effective group IDs and the
-     saved set-group-ID of the current process to the specified value.  The
-     setgid() system call is permitted if the specified ID is equal to the
-     real group ID or the effective group ID of the process, or if the effec-
-     tive user ID is that of the super user.
-−
-     The seteuid() system call (setegid()) sets the effective user ID (group
-     ID) of the current process.  The effective user ID may be set to the
-     value of the real user ID or the saved set-user-ID (see intro(2) and
-     execve(2)); in this way, the effective user ID of a set-user-ID exe-
-     cutable may be toggled by switching to the real user ID, then re-enabled
-     by reverting to the set-user-ID value.  Similarly, the effective group ID
-     may be set to the value of the real group ID or the saved set-group-ID.
-See also http://setuid.org/
-[[Category:FreeBSD Terminology]]