Important Notice: Our web hosting provider recently started charging us for additional visits, which was unexpected. In response, we're seeking donations. Depending on the situation, we may explore different monetization options for our Community and Expert Contributors. It's crucial to provide more returns for their expertise and offer more Expert Validated Answers or AI Validated Answers. Learn more about our hosting issue here.

Are setuid programs executable across AFS cell boundaries?

April 26, 2017AFS boundaries CELL executable Programs setuid

0

Posted

Are setuid programs executable across AFS cell boundaries?

1 Answer

0

Posted

By default, the setuid bit is ignored but the program may be run (without setuid privilege). It is possible to configure an AFS client to honour the setuid bit. This is achieved by root running: root@toontown # fs setcell -cell $cellname -suid (where $cellname is the name of the foreign cell. Use with care!). NB: making a program setuid (or setgid) in AFS does *not* mean that the program will get AFS permissions of a user or group. To become AFS authenticated, you have to klog. If you are not authenticated, AFS treats you as “system:anyuser”.