In this lesson, you will learn how the Set-User-ID (SUID) bit allows a normal user to temporarily "borrow" the permissions of a file owner to perform restricted tasks.
Elevating Privileges via SUID
Normally, when you execute a program, it runs with your own permissions. You are limited to accessing only the files and resources that your specific user account is allowed to touch. However, some system tasks—like changing your password—require modifying files that only the root user can touch (such as /etc/shadow).
The SUID bit is a special filesystem permission that bridges this gap. When you set the SUID bit on an executable file, the operating system detects it during execution. Instead of running the process as you (the Real UID), the kernel spawns the process with the privileges of the file owner (the Effective UID).
A Practical Illustration
Imagine a utility owned by root with the SUID bit enabled. When you run this utility:
- Your process starts with your user ID (e.g.,
student). - The kernel spots the SUID bit on the file.
- The process's "Effective UID" switches from
studenttorootfor the duration of that specific program's execution.
You can observe this by looking for the s indicator in the file permissions:
-rwsr-xr-x 1 root root 64K Mar 10 12:00 /usr/bin/passwd
In this output, the s in the owner field replaces the usual x, signaling that this binary will execute with root privileges regardless of who runs it. Once the program finishes and the process exits, the effective privilege level immediately reverts back to your own.
This mechanism is the foundation of controlled access in Linux. By creating a binary that only performs one specific, safe action (like updating a password) and setting it to SUID, the system administrator grants the user access to a restricted resource without handing over full administrative control. The program acts as a "gatekeeper," ensuring the user only performs the intended task while operating under the elevated authority required to complete it.
Key Takeaway: The SUID bit allows a process to temporarily assume the privileges of the file owner, enabling users to perform restricted system tasks safely while maintaining a clear audit trail and strict limitation of access.