Principle of least privilege: Does Authbind helper really need setuid root, or can it run with cap_net_bind_services?
Does Authbind's helper really need setuid root, or can it run with the CAP_NET_BIND_SERVICES capability and still work?
I want to run my matlab instance as a special group. I tried setting sgid on matlab-startup-script or (not exclusive) on MATLAB-binary. Both ways were not successful. For example running sudo chmod ...
I have the container's rootfs in a volume mounted with the nosuid option. When I start the container, its / mounted is then also mounted nosuid, which breaks programs such as sudo. How can I avoid ...
I was experimenting with the security of my system and noticed something strange: setting the setuid bit on a copy of bash located at /usr/bin/bash-test seemed to have no effect. When I ran an ...
I want to demonstrate the vulnerability of setuid programs using the TinyCore Linux live cd. That is, I craft a special program, with special permissions, so that it runs as the owner of the file ...
Inspired by this question here is the follow-up: As some of you may know setuid-binaries are dangerous, since some exploits use these to escalate their rights up to root. Now it seems that there has ...