{"id":17836,"date":"2026-07-07T16:15:12","date_gmt":"2026-07-07T12:45:12","guid":{"rendered":""},"modified":"2026-07-27T23:59:18","modified_gmt":"2026-07-27T20:29:18","slug":"suid-in-linux","status":"publish","type":"docs","link":"https:\/\/maralhost.com\/kb\/docs\/linux\/suid-in-linux\/","title":{"rendered":"\u0622\u0645\u0648\u0632\u0634 SUID \u062f\u0631 \u0644\u06cc\u0646\u0648\u06a9\u0633\u061b \u0627\u062c\u0631\u0627\u06cc \u0628\u0631\u0646\u0627\u0645\u0647\u200c\u0647\u0627 \u0628\u0627 \u062f\u0633\u062a\u0631\u0633\u06cc \u0645\u0627\u0644\u06a9 \u0641\u0627\u06cc\u0644"},"content":{"rendered":"\n<h2 class=\"wp-block-heading\">\u0645\u0642\u062f\u0645\u0647<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\u062f\u0631 \u0644\u06cc\u0646\u0648\u06a9\u0633\u060c \u0628\u0631\u0646\u0627\u0645\u0647\u200c\u0647\u0627 \u0645\u0639\u0645\u0648\u0644\u0627\u064b \u0628\u0627 \u0633\u0637\u062d \u062f\u0633\u062a\u0631\u0633\u06cc \u06a9\u0627\u0631\u0628\u0631\u06cc \u0627\u062c\u0631\u0627 \u0645\u06cc\u200c\u0634\u0648\u0646\u062f \u06a9\u0647 \u0622\u0646\u200c\u0647\u0627 \u0631\u0627 \u0641\u0631\u0627\u062e\u0648\u0627\u0646\u06cc \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a. \u0628\u0631\u0627\u06cc \u0645\u062b\u0627\u0644\u060c \u0627\u06af\u0631 \u06a9\u0627\u0631\u0628\u0631 <code>ali<\/code> \u06cc\u06a9 \u0628\u0631\u0646\u0627\u0645\u0647 \u0631\u0627 \u0627\u062c\u0631\u0627 \u06a9\u0646\u062f\u060c \u0622\u0646 \u0628\u0631\u0646\u0627\u0645\u0647 \u0646\u06cc\u0632 \u0645\u0639\u0645\u0648\u0644\u0627\u064b \u0628\u0627 \u062f\u0633\u062a\u0631\u0633\u06cc\u200c\u0647\u0627\u06cc \u06a9\u0627\u0631\u0628\u0631 <code>ali<\/code> \u0641\u0639\u0627\u0644\u06cc\u062a \u062e\u0648\u0627\u0647\u062f \u06a9\u0631\u062f.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u0627\u0645\u0627 \u0628\u0639\u0636\u06cc \u0628\u0631\u0646\u0627\u0645\u0647\u200c\u0647\u0627 \u0628\u0631\u0627\u06cc \u0627\u0646\u062c\u0627\u0645 \u0648\u0638\u06cc\u0641\u0647 \u062e\u0648\u062f \u0628\u0647 \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0627\u0644\u0627\u062a\u0631\u06cc \u0646\u06cc\u0627\u0632 \u062f\u0627\u0631\u0646\u062f. \u0628\u0631\u0627\u06cc \u0646\u0645\u0648\u0646\u0647\u060c \u062f\u0633\u062a\u0648\u0631 <code>passwd<\/code> \u0628\u0627\u06cc\u062f \u0628\u062a\u0648\u0627\u0646\u062f \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0631\u0645\u0632 \u0639\u0628\u0648\u0631 \u0631\u0627 \u062f\u0631 \u0641\u0627\u06cc\u0644\u200c\u0647\u0627\u06cc \u0645\u062d\u0627\u0641\u0638\u062a\u200c\u0634\u062f\u0647 \u0633\u06cc\u0633\u062a\u0645 \u062a\u063a\u06cc\u06cc\u0631 \u062f\u0647\u062f\u061b \u062f\u0631 \u062d\u0627\u0644\u06cc \u06a9\u0647 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0645\u0639\u0645\u0648\u0644\u06cc \u0627\u062c\u0627\u0632\u0647 \u0646\u0648\u0634\u062a\u0646 \u0645\u0633\u062a\u0642\u06cc\u0645 \u062f\u0631 \u0627\u06cc\u0646 \u0641\u0627\u06cc\u0644\u200c\u0647\u0627 \u0631\u0627 \u0646\u062f\u0627\u0631\u0646\u062f.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u0644\u06cc\u0646\u0648\u06a9\u0633 \u0628\u0631\u0627\u06cc \u0645\u062f\u06cc\u0631\u06cc\u062a \u0686\u0646\u06cc\u0646 \u0634\u0631\u0627\u06cc\u0637\u06cc \u0627\u0632 Permission \u0648\u06cc\u0698\u0647\u200c\u0627\u06cc \u0628\u0647 \u0646\u0627\u0645 <strong>SUID<\/strong> \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u06a9\u0646\u062f. \u0648\u0642\u062a\u06cc SUID \u0631\u0648\u06cc \u06cc\u06a9 \u0641\u0627\u06cc\u0644 \u0627\u062c\u0631\u0627\u06cc\u06cc \u0641\u0639\u0627\u0644 \u0628\u0627\u0634\u062f\u060c \u0628\u0631\u0646\u0627\u0645\u0647 \u0647\u0646\u06af\u0627\u0645 \u0627\u062c\u0631\u0627 \u0628\u0627 <strong>Effective UID \u0645\u0627\u0644\u06a9 \u0641\u0627\u06cc\u0644<\/strong> \u0627\u062c\u0631\u0627 \u0645\u06cc\u200c\u0634\u0648\u062f\u060c \u0646\u0647 \u0635\u0631\u0641\u0627\u064b \u0628\u0627 \u062f\u0633\u062a\u0631\u0633\u06cc \u06a9\u0627\u0631\u0628\u0631\u06cc \u06a9\u0647 \u0622\u0646 \u0631\u0627 \u0627\u062c\u0631\u0627 \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u0627\u06af\u0631 \u0641\u0627\u06cc\u0644 \u0645\u062a\u0639\u0644\u0642 \u0628\u0647 <code>root<\/code> \u0628\u0627\u0634\u062f \u0648 SUID \u0631\u0648\u06cc \u0622\u0646 \u0641\u0639\u0627\u0644 \u0634\u0648\u062f\u060c \u0628\u0631\u0646\u0627\u0645\u0647 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0647\u0646\u06af\u0627\u0645 \u0627\u062c\u0631\u0627 \u0628\u062e\u0634\u06cc \u0627\u0632 \u062f\u0633\u062a\u0631\u0633\u06cc\u200c\u0647\u0627\u06cc root \u0631\u0627 \u062f\u0631\u06cc\u0627\u0641\u062a \u06a9\u0646\u062f. \u0628\u0647 \u0647\u0645\u06cc\u0646 \u062f\u0644\u06cc\u0644\u060c SUID \u0642\u0627\u0628\u0644\u06cc\u062a \u0642\u062f\u0631\u062a\u0645\u0646\u062f \u0648 \u062f\u0631 \u0639\u06cc\u0646 \u062d\u0627\u0644 \u0628\u0633\u06cc\u0627\u0631 \u062d\u0633\u0627\u0633\u06cc \u0627\u0633\u062a.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u062f\u0631 \u0627\u06cc\u0646 \u0645\u0642\u0627\u0644\u0647 \u0645\u0648\u0627\u0631\u062f \u0632\u06cc\u0631 \u0631\u0627 \u0628\u0631\u0631\u0633\u06cc \u0645\u06cc\u200c\u06a9\u0646\u06cc\u0645:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>SUID \u0686\u06cc\u0633\u062a \u0648 \u0686\u06af\u0648\u0646\u0647 \u06a9\u0627\u0631 \u0645\u06cc\u200c\u06a9\u0646\u062f\u061f<\/li>\n\n\n\n<li>\u062a\u0641\u0627\u0648\u062a Real UID \u0648 Effective UID<\/li>\n\n\n\n<li>\u0631\u0648\u0634 \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0641\u0627\u06cc\u0644\u200c\u0647\u0627\u06cc SUID<\/li>\n\n\n\n<li>\u0641\u0639\u0627\u0644\u200c\u0633\u0627\u0632\u06cc \u0648 \u062d\u0630\u0641 SUID<\/li>\n\n\n\n<li>\u062a\u0641\u0627\u0648\u062a <code>s<\/code> \u0648 <code>S<\/code><\/li>\n\n\n\n<li>\u0622\u0632\u0645\u0627\u06cc\u0634 \u0639\u0645\u0644\u06cc \u0648 \u06a9\u0646\u062a\u0631\u0644\u200c\u0634\u062f\u0647 SUID<\/li>\n\n\n\n<li>\u0641\u0627\u06cc\u0644\u200c\u0633\u06cc\u0633\u062a\u0645\u200c\u0647\u0627\u06cc \u062f\u0627\u0631\u0627\u06cc \u06af\u0632\u06cc\u0646\u0647 <code>nosuid<\/code><\/li>\n\n\n\n<li>\u062e\u0637\u0631\u0627\u062a \u0627\u0645\u0646\u06cc\u062a\u06cc \u0641\u0627\u06cc\u0644\u200c\u0647\u0627\u06cc SUID<\/li>\n\n\n\n<li>\u062c\u0627\u06cc\u06af\u0632\u06cc\u0646\u200c\u0647\u0627\u06cc\u06cc \u0645\u0627\u0646\u0646\u062f sudo \u0648 Linux Capabilities<\/li>\n\n\n\n<li>\u0628\u0631\u0631\u0633\u06cc \u0648 \u0639\u06cc\u0628\u200c\u06cc\u0627\u0628\u06cc \u0641\u0627\u06cc\u0644\u200c\u0647\u0627\u06cc SUID<\/li>\n<\/ul>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\">SUID \u0686\u06cc\u0633\u062a\u061f<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">SUID \u0645\u062e\u0641\u0641 <strong>Set User ID<\/strong> \u0627\u0633\u062a \u0648 \u06cc\u06a9\u06cc \u0627\u0632 Permission\u0647\u0627\u06cc \u0648\u06cc\u0698\u0647 \u0641\u0627\u06cc\u0644 \u062f\u0631 \u0633\u06cc\u0633\u062a\u0645\u200c\u0647\u0627\u06cc Unix \u0648 Linux \u0645\u062d\u0633\u0648\u0628 \u0645\u06cc\u200c\u0634\u0648\u062f.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u0647\u0646\u06af\u0627\u0645\u06cc \u06a9\u0647 SUID \u0631\u0648\u06cc \u06cc\u06a9 \u0641\u0627\u06cc\u0644 \u0627\u062c\u0631\u0627\u06cc\u06cc \u0641\u0639\u0627\u0644 \u0628\u0627\u0634\u062f\u060c \u0633\u06cc\u0633\u062a\u0645 \u0647\u0646\u06af\u0627\u0645 \u0627\u062c\u0631\u0627\u06cc \u0622\u0646\u060c Effective UID \u067e\u0631\u062f\u0627\u0632\u0634 \u0631\u0627 \u0628\u0647 UID \u0645\u0627\u0644\u06a9 \u0641\u0627\u06cc\u0644 \u062a\u063a\u06cc\u06cc\u0631 \u0645\u06cc\u200c\u062f\u0647\u062f. Real UID \u06a9\u0627\u0631\u0628\u0631 \u0627\u062c\u0631\u0627\u06a9\u0646\u0646\u062f\u0647 \u0628\u062f\u0648\u0646 \u062a\u063a\u06cc\u06cc\u0631 \u0628\u0627\u0642\u06cc \u0645\u06cc\u200c\u0645\u0627\u0646\u062f.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u0628\u0631\u0627\u06cc \u0645\u062b\u0627\u0644:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>File owner: root\nExecuting user: ali\n\nReal UID: ali\nEffective UID: root\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u062f\u0631 \u0627\u06cc\u0646 \u062d\u0627\u0644\u062a\u060c \u0628\u0631\u0646\u0627\u0645\u0647 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0639\u0645\u0644\u06cc\u0627\u062a \u0645\u0634\u062e\u0635\u06cc \u0631\u0627 \u0628\u0627 \u062f\u0633\u062a\u0631\u0633\u06cc \u0645\u0627\u0644\u06a9 \u0641\u0627\u06cc\u0644 \u0627\u0646\u062c\u0627\u0645 \u062f\u0647\u062f.<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p class=\"wp-block-paragraph\">SUID \u0641\u0642\u0637 \u0628\u0627\u06cc\u062f \u0631\u0648\u06cc \u0641\u0627\u06cc\u0644\u200c\u0647\u0627\u06cc \u0627\u062c\u0631\u0627\u06cc\u06cc \u0642\u0627\u0628\u0644\u200c\u0627\u0639\u062a\u0645\u0627\u062f \u0648 \u0637\u0631\u0627\u062d\u06cc\u200c\u0634\u062f\u0647 \u0628\u0631\u0627\u06cc \u0627\u062c\u0631\u0627\u06cc Privileged \u0641\u0639\u0627\u0644 \u0634\u0648\u062f.<\/p>\n<\/blockquote>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">\u0686\u0631\u0627 \u0628\u0647 SUID \u0646\u06cc\u0627\u0632 \u062f\u0627\u0631\u06cc\u0645\u061f<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">\u0628\u0631\u062e\u06cc \u0628\u0631\u0646\u0627\u0645\u0647\u200c\u0647\u0627 \u0628\u0627\u06cc\u062f \u0639\u0645\u0644\u06cc\u0627\u062a\u06cc \u0627\u0646\u062c\u0627\u0645 \u062f\u0647\u0646\u062f \u06a9\u0647 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0645\u0639\u0645\u0648\u0644\u06cc \u0645\u0633\u062a\u0642\u06cc\u0645\u0627\u064b \u0627\u062c\u0627\u0632\u0647 \u0627\u0646\u062c\u0627\u0645 \u0622\u0646 \u0631\u0627 \u0646\u062f\u0627\u0631\u0646\u062f.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u0628\u0631\u0627\u06cc \u0645\u062b\u0627\u0644\u060c \u062a\u063a\u06cc\u06cc\u0631 \u0631\u0645\u0632 \u0639\u0628\u0648\u0631 \u0628\u0647 \u062f\u0633\u062a\u0631\u0633\u06cc \u0631\u0648\u06cc \u0641\u0627\u06cc\u0644\u200c\u0647\u0627\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc \u0633\u06cc\u0633\u062a\u0645 \u0646\u06cc\u0627\u0632 \u062f\u0627\u0631\u062f. \u0628\u0631\u0646\u0627\u0645\u0647 \u0645\u0631\u0628\u0648\u0637 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0628\u0627 SUID \u0628\u0647\u200c\u0635\u0648\u0631\u062a \u06a9\u0646\u062a\u0631\u0644\u200c\u0634\u062f\u0647 \u0639\u0645\u0644\u06cc\u0627\u062a \u0644\u0627\u0632\u0645 \u0631\u0627 \u0627\u0646\u062c\u0627\u0645 \u062f\u0647\u062f\u060c \u0628\u062f\u0648\u0646 \u0627\u06cc\u0646\u06a9\u0647 \u06a9\u0627\u0631\u0628\u0631 \u0628\u0647 \u062a\u0645\u0627\u0645 \u062f\u0633\u062a\u0631\u0633\u06cc\u200c\u0647\u0627\u06cc root \u062f\u0633\u062a \u067e\u06cc\u062f\u0627 \u06a9\u0646\u062f.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u0628\u0631\u0646\u0627\u0645\u0647 SUID \u0628\u0627\u06cc\u062f:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>\u0648\u0631\u0648\u062f\u06cc \u06a9\u0627\u0631\u0628\u0631 \u0631\u0627 \u06a9\u0646\u062a\u0631\u0644 \u06a9\u0646\u062f.<\/li>\n\n\n\n<li>\u0641\u0642\u0637 \u0639\u0645\u0644\u06cc\u0627\u062a \u0645\u0648\u0631\u062f\u0646\u06cc\u0627\u0632 \u0631\u0627 \u0627\u0646\u062c\u0627\u0645 \u062f\u0647\u062f.<\/li>\n\n\n\n<li>\u0627\u0632 \u0627\u062c\u0631\u0627\u06cc Command\u0647\u0627\u06cc \u062f\u0644\u062e\u0648\u0627\u0647 \u062c\u0644\u0648\u06af\u06cc\u0631\u06cc \u06a9\u0646\u062f.<\/li>\n\n\n\n<li>\u062f\u0633\u062a\u0631\u0633\u06cc \u0627\u0636\u0627\u0641\u0647 \u0631\u0627 \u062f\u0631 \u0633\u0631\u06cc\u0639\u200c\u062a\u0631\u06cc\u0646 \u0632\u0645\u0627\u0646 \u0645\u0645\u06a9\u0646 \u06a9\u0646\u0627\u0631 \u0628\u06af\u0630\u0627\u0631\u062f.<\/li>\n\n\n\n<li>\u0641\u0627\u06cc\u0644\u200c\u0647\u0627 \u0648 \u0645\u0633\u06cc\u0631\u0647\u0627\u06cc \u0642\u0627\u0628\u0644\u200c\u0627\u0639\u062a\u0645\u0627\u062f \u0631\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0646\u062f.<\/li>\n\n\n\n<li>\u0645\u062a\u063a\u06cc\u0631\u0647\u0627\u06cc Environment \u0631\u0627 \u0628\u0627 \u0627\u062d\u062a\u06cc\u0627\u0637 \u0645\u062f\u06cc\u0631\u06cc\u062a \u06a9\u0646\u062f.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">\u0648\u062c\u0648\u062f \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 \u06cc\u06a9 \u0628\u0631\u0646\u0627\u0645\u0647 SUID \u0645\u062a\u0639\u0644\u0642 \u0628\u0647 root \u0645\u0645\u06a9\u0646 \u0627\u0633\u062a \u0628\u0647 \u0627\u0641\u0632\u0627\u06cc\u0634 \u0633\u0637\u062d \u062f\u0633\u062a\u0631\u0633\u06cc \u062a\u0627 root \u0645\u0646\u062c\u0631 \u0634\u0648\u062f.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">\u062a\u0641\u0627\u0648\u062a Real UID \u0648 Effective UID<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">\u067e\u0631\u062f\u0627\u0632\u0634\u200c\u0647\u0627 \u062f\u0631 \u0644\u06cc\u0646\u0648\u06a9\u0633 \u0686\u0646\u062f \u0634\u0646\u0627\u0633\u0647 \u06a9\u0627\u0631\u0628\u0631\u06cc \u0645\u0631\u062a\u0628\u0637 \u062f\u0627\u0631\u0646\u062f.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Real UID<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Real UID \u0645\u0634\u062e\u0635 \u0645\u06cc\u200c\u06a9\u0646\u062f \u067e\u0631\u062f\u0627\u0632\u0634 \u062f\u0631 \u0627\u0635\u0644 \u062a\u0648\u0633\u0637 \u0686\u0647 \u06a9\u0627\u0631\u0628\u0631\u06cc \u0627\u062c\u0631\u0627 \u0634\u062f\u0647 \u0627\u0633\u062a.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u0628\u0631\u0627\u06cc \u0645\u062b\u0627\u0644:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>Real UID: ali\n<\/code><\/pre>\n\n\n\n<h2 class=\"wp-block-heading\">Effective UID<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Effective UID \u0628\u0631\u0627\u06cc \u0628\u0633\u06cc\u0627\u0631\u06cc \u0627\u0632 \u0628\u0631\u0631\u0633\u06cc\u200c\u0647\u0627\u06cc Permission \u0633\u06cc\u0633\u062a\u0645 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u062f\u0631 \u06cc\u06a9 \u0628\u0631\u0646\u0627\u0645\u0647 \u0639\u0627\u062f\u06cc:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>Real UID: ali\nEffective UID: ali\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u062f\u0631 \u06cc\u06a9 \u0628\u0631\u0646\u0627\u0645\u0647 SUID \u0645\u062a\u0639\u0644\u0642 \u0628\u0647 root:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>Real UID: ali\nEffective UID: root\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0647\u0646\u06af\u0627\u0645 \u0627\u062c\u0631\u0627\u06cc \u06cc\u06a9 \u0641\u0627\u06cc\u0644 SUID\u060c Linux \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f Effective UID \u0631\u0627 \u0628\u0647 \u0645\u0627\u0644\u06a9 \u0641\u0627\u06cc\u0644 \u062a\u063a\u06cc\u06cc\u0631 \u062f\u0647\u062f \u0648 \u0633\u067e\u0633 \u0622\u0646 \u0631\u0627 \u062f\u0631 Saved Set-User-ID \u0630\u062e\u06cc\u0631\u0647 \u06a9\u0646\u062f. Real UID \u06a9\u0627\u0631\u0628\u0631 \u0627\u062c\u0631\u0627\u06a9\u0646\u0646\u062f\u0647 \u062a\u063a\u06cc\u06cc\u0631 \u0646\u0645\u06cc\u200c\u06a9\u0646\u062f.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Saved Set-User-ID<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Saved Set-User-ID \u0628\u0647 \u0628\u0631\u0646\u0627\u0645\u0647 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0647\u062f \u062f\u0631 \u0635\u0648\u0631\u062a \u0637\u0631\u0627\u062d\u06cc \u0635\u062d\u06cc\u062d\u060c \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0627\u0644\u0627\u062a\u0631 \u0631\u0627 \u0645\u0648\u0642\u062a\u0627\u064b \u06a9\u0646\u0627\u0631 \u0628\u06af\u0630\u0627\u0631\u062f \u0648 \u062f\u0631 \u0645\u0631\u0627\u062d\u0644 \u0645\u0648\u0631\u062f\u0646\u06cc\u0627\u0632 \u062f\u0648\u0628\u0627\u0631\u0647 \u0622\u0646 \u0631\u0627 \u0641\u0639\u0627\u0644 \u06a9\u0646\u062f.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u0627\u06cc\u0646 \u0631\u0641\u062a\u0627\u0631 \u0628\u0627\u06cc\u062f \u062a\u0648\u0633\u0637 \u062e\u0648\u062f \u0628\u0631\u0646\u0627\u0645\u0647 \u0628\u0647\u200c\u0634\u06a9\u0644 \u0627\u0645\u0646 \u0645\u062f\u06cc\u0631\u06cc\u062a \u0634\u0648\u062f.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">\u0645\u0634\u0627\u0647\u062f\u0647 Permission \u06cc\u06a9 \u0641\u0627\u06cc\u0644<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">\u0628\u0631\u0627\u06cc \u0645\u0634\u0627\u0647\u062f\u0647 Permission \u0641\u0627\u06cc\u0644 \u0627\u0632 \u062f\u0633\u062a\u0648\u0631 \u0632\u06cc\u0631 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0646\u06cc\u062f:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>ls -l \/path\/to\/application\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0646\u0645\u0648\u0646\u0647 \u0641\u0627\u06cc\u0644 \u0645\u0639\u0645\u0648\u0644\u06cc:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>-rwxr-xr-x 1 root root 54256 Jul 27 10:00 application\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0646\u0645\u0648\u0646\u0647 \u0641\u0627\u06cc\u0644 \u062f\u0627\u0631\u0627\u06cc SUID:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>-rwsr-xr-x 1 root root 54256 Jul 27 10:00 application\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u062d\u0631\u0641 <code>s<\/code> \u062f\u0631 \u0645\u062d\u0644 Execute \u0645\u0627\u0644\u06a9 \u0646\u0634\u0627\u0646 \u0645\u06cc\u200c\u062f\u0647\u062f SUID \u0641\u0639\u0627\u0644 \u0627\u0633\u062a.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u0633\u0627\u062e\u062a\u0627\u0631:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>-rwsr-xr-x\n |||\n ||\u2514\u2500\u2500 Owner execute position\n |\u2514\u2500\u2500\u2500 Owner write\n \u2514\u2500\u2500\u2500\u2500 Owner read\n<\/code><\/pre>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">\u0645\u0634\u0627\u0647\u062f\u0647 Permission \u0639\u062f\u062f\u06cc<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">\u0628\u0631\u0627\u06cc \u0645\u0634\u0627\u0647\u062f\u0647 Permission \u0639\u062f\u062f\u06cc:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>stat -c '%a %A %U %G %n' \/path\/to\/application\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0646\u0645\u0648\u0646\u0647 \u062e\u0631\u0648\u062c\u06cc:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>4755 -rwsr-xr-x root root \/path\/to\/application\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0639\u062f\u062f \u0627\u0648\u0644 \u06cc\u0639\u0646\u06cc <code>4<\/code> \u0646\u0634\u0627\u0646\u200c\u062f\u0647\u0646\u062f\u0647 SUID \u0627\u0633\u062a.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">\u0633\u0627\u062e\u062a\u0627\u0631 \u0639\u062f\u062f\u06cc SUID<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">Permission\u0647\u0627\u06cc \u0648\u06cc\u0698\u0647 \u062f\u0631 \u0631\u0642\u0645 \u0627\u0648\u0644 Mode \u0686\u0647\u0627\u0631\u0631\u0642\u0645\u06cc \u0646\u0645\u0627\u06cc\u0634 \u062f\u0627\u062f\u0647 \u0645\u06cc\u200c\u0634\u0648\u0646\u062f:<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><thead><tr><th class=\"has-text-align-center\" data-align=\"center\">\u0645\u0642\u062f\u0627\u0631<\/th><th class=\"has-text-align-center\" data-align=\"center\">Permission \u0648\u06cc\u0698\u0647<\/th><\/tr><\/thead><tbody><tr><td class=\"has-text-align-center\" data-align=\"center\"><code>4<\/code><\/td><td class=\"has-text-align-center\" data-align=\"center\">SUID<\/td><\/tr><tr><td class=\"has-text-align-center\" data-align=\"center\"><code>2<\/code><\/td><td class=\"has-text-align-center\" data-align=\"center\">SGID<\/td><\/tr><tr><td class=\"has-text-align-center\" data-align=\"center\"><code>1<\/code><\/td><td class=\"has-text-align-center\" data-align=\"center\">Sticky Bit<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">\u0628\u0631\u0627\u06cc \u0645\u062b\u0627\u0644:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>4755\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u062a\u062c\u0632\u06cc\u0647:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>4 = SUID\n7 = Owner: Read, Write, and Execute\n5 = Group: Read and Execute\n5 = Other: Read and Execute\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Permission \u0646\u0645\u0627\u062f\u06cc\u0646:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>-rwsr-xr-x\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">GNU Coreutils \u0628\u0631\u0627\u06cc \u0641\u0639\u0627\u0644\u200c\u06a9\u0631\u062f\u0646 Set-User-ID \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 <code>u+s<\/code> \u0631\u0627 \u062a\u0639\u0631\u06cc\u0641 \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">\u0641\u0639\u0627\u0644\u200c\u06a9\u0631\u062f\u0646 SUID<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">\u0628\u0631\u0627\u06cc \u0641\u0639\u0627\u0644\u200c\u06a9\u0631\u062f\u0646 SUID \u0628\u0647\u200c\u0635\u0648\u0631\u062a \u0646\u0645\u0627\u062f\u06cc\u0646:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo chmod u+s \/path\/to\/application\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0628\u0631\u0631\u0633\u06cc:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>ls -l \/path\/to\/application\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u062e\u0631\u0648\u062c\u06cc \u0627\u062d\u062a\u0645\u0627\u0644\u06cc:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>-rwsr-xr-x 1 root root 54256 Jul 27 10:00 application\n<\/code><\/pre>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\">\u0641\u0639\u0627\u0644\u200c\u06a9\u0631\u062f\u0646 SUID \u0628\u0647\u200c\u0635\u0648\u0631\u062a \u0639\u062f\u062f\u06cc<\/h2>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo chmod 4755 \/path\/to\/application\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0627\u06cc\u0646 \u062f\u0633\u062a\u0648\u0631 \u0647\u0645\u200c\u0632\u0645\u0627\u0646 Permission \u0639\u0627\u062f\u06cc \u0648 SUID \u0631\u0627 \u062a\u0646\u0638\u06cc\u0645 \u0645\u06cc\u200c\u06a9\u0646\u062f.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u0628\u0631\u0631\u0633\u06cc:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>stat -c '%a %A %U %G %n' \/path\/to\/application\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u062e\u0631\u0648\u062c\u06cc:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>4755 -rwsr-xr-x root root \/path\/to\/application\n<\/code><\/pre>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">\u062d\u0630\u0641 SUID<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">\u0628\u0631\u0627\u06cc \u062d\u0630\u0641 SUID \u0628\u0647\u200c\u0635\u0648\u0631\u062a \u0646\u0645\u0627\u062f\u06cc\u0646:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo chmod u-s \/path\/to\/application\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0628\u0631\u0631\u0633\u06cc:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>ls -l \/path\/to\/application\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u062e\u0631\u0648\u062c\u06cc:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>-rwxr-xr-x 1 root root 54256 Jul 27 10:00 application\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0631\u0648\u0634 \u0639\u062f\u062f\u06cc:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo chmod 0755 \/path\/to\/application\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u062f\u0631 Script\u0647\u0627\u06cc \u0642\u0627\u0628\u0644\u200c\u062d\u0645\u0644\u060c \u0628\u0647\u062a\u0631 \u0627\u0633\u062a \u062d\u0630\u0641 Bit \u0648\u06cc\u0698\u0647 \u0631\u0627 \u0628\u0647\u200c\u0635\u0648\u0631\u062a \u0635\u0631\u06cc\u062d \u0627\u0646\u062c\u0627\u0645 \u062f\u0647\u06cc\u062f:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo chmod u-s \/path\/to\/application\n<\/code><\/pre>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">\u062a\u0641\u0627\u0648\u062a s \u0648 S<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">SUID \u0645\u0645\u06a9\u0646 \u0627\u0633\u062a \u0628\u0627 \u062d\u0631\u0641 \u06a9\u0648\u0686\u06a9 <code>s<\/code> \u06cc\u0627 \u062d\u0631\u0641 \u0628\u0632\u0631\u06af <code>S<\/code> \u0646\u0645\u0627\u06cc\u0634 \u062f\u0627\u062f\u0647 \u0634\u0648\u062f.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\u062d\u0631\u0641 \u06a9\u0648\u0686\u06a9 s<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\u0627\u06af\u0631 SUID \u0648 Execute \u0645\u0627\u0644\u06a9 \u0647\u0631 \u062f\u0648 \u0641\u0639\u0627\u0644 \u0628\u0627\u0634\u0646\u062f:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>-rwsr-xr-x\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u062d\u0631\u0641 \u06a9\u0648\u0686\u06a9 <code>s<\/code> \u0646\u0645\u0627\u06cc\u0634 \u062f\u0627\u062f\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u0627\u06cc\u0646 \u062d\u0627\u0644\u062a \u0645\u0639\u0645\u0648\u0644 \u06cc\u06a9 \u0641\u0627\u06cc\u0644 \u0627\u062c\u0631\u0627\u06cc\u06cc SUID \u0627\u0633\u062a.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\">\u062d\u0631\u0641 \u0628\u0632\u0631\u06af S<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\u0627\u06af\u0631 SUID \u0641\u0639\u0627\u0644 \u0628\u0627\u0634\u062f \u0627\u0645\u0627 \u0645\u0627\u0644\u06a9 \u0641\u0627\u06cc\u0644 \u0645\u062c\u0648\u0632 Execute \u0646\u062f\u0627\u0634\u062a\u0647 \u0628\u0627\u0634\u062f:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>-rwSr--r--\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u062d\u0631\u0641 \u0628\u0632\u0631\u06af <code>S<\/code> \u0646\u0645\u0627\u06cc\u0634 \u062f\u0627\u062f\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u0646\u0645\u0648\u0646\u0647 \u0633\u0627\u062e\u062a \u0686\u0646\u06cc\u0646 \u0648\u0636\u0639\u06cc\u062a\u06cc:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo chmod 4644 application\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0628\u0631\u0631\u0633\u06cc:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>ls -l application\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u062e\u0631\u0648\u062c\u06cc:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>-rwSr--r-- 1 root root 54256 Jul 27 10:00 application\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u062f\u0631 \u0627\u06cc\u0646 \u062d\u0627\u0644\u062a \u0641\u0627\u06cc\u0644 \u0628\u0631\u0627\u06cc \u0645\u0627\u0644\u06a9 Executable \u0646\u06cc\u0633\u062a \u0648 SUID \u06a9\u0627\u0631\u0628\u0631\u062f \u0627\u062c\u0631\u0627\u06cc\u06cc \u0645\u0648\u0631\u062f\u0627\u0646\u062a\u0638\u0627\u0631 \u0631\u0627 \u0646\u062f\u0627\u0631\u062f.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u0628\u0631\u0627\u06cc \u0627\u0635\u0644\u0627\u062d\u060c Execute \u0631\u0627 \u0627\u0636\u0627\u0641\u0647 \u06a9\u0646\u06cc\u062f:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo chmod u+x application\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u06cc\u0627 SUID \u0631\u0627 \u062d\u0630\u0641 \u06a9\u0646\u06cc\u062f:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo chmod u-s application\n<\/code><\/pre>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">\u0628\u0631\u0631\u0633\u06cc \u062f\u0633\u062a\u0648\u0631 passwd<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">\u062f\u0631 \u0628\u0633\u06cc\u0627\u0631\u06cc \u0627\u0632 \u062a\u0648\u0632\u06cc\u0639\u200c\u0647\u0627\u060c \u0641\u0627\u06cc\u0644 \u0627\u062c\u0631\u0627\u06cc\u06cc <code>passwd<\/code> \u062f\u0627\u0631\u0627\u06cc SUID \u0645\u062a\u0639\u0644\u0642 \u0628\u0647 root \u0627\u0633\u062a. \u0648\u0636\u0639\u06cc\u062a \u0648\u0627\u0642\u0639\u06cc \u0631\u0627 \u0631\u0648\u06cc \u0647\u0645\u0627\u0646 \u0633\u06cc\u0633\u062a\u0645 \u0628\u0631\u0631\u0633\u06cc \u06a9\u0646\u06cc\u062f:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>command -v passwd\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0633\u067e\u0633:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>ls -l \"$(command -v passwd)\"\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0646\u0645\u0648\u0646\u0647 \u062e\u0631\u0648\u062c\u06cc \u0627\u062d\u062a\u0645\u0627\u0644\u06cc:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>-rwsr-xr-x 1 root root 68248 Feb 10 09:00 \/usr\/bin\/passwd\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0628\u0631\u0631\u0633\u06cc \u0639\u062f\u062f\u06cc:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>stat -c '%a %A %U %G %n' \"$(command -v passwd)\"\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0646\u0645\u0648\u0646\u0647:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>4755 -rwsr-xr-x root root \/usr\/bin\/passwd\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0648\u062c\u0648\u062f SUID \u0628\u0647 \u0628\u0631\u0646\u0627\u0645\u0647 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0647\u062f \u0639\u0645\u0644\u06cc\u0627\u062a \u0645\u062d\u062f\u0648\u062f \u0648 \u06a9\u0646\u062a\u0631\u0644\u200c\u0634\u062f\u0647 \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u062a\u063a\u06cc\u06cc\u0631 \u0631\u0645\u0632 \u0639\u0628\u0648\u0631 \u0631\u0627 \u0628\u0627 Effective UID \u0645\u0627\u0644\u06a9 \u0627\u0646\u062c\u0627\u0645 \u062f\u0647\u062f.<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p class=\"wp-block-paragraph\">SUID \u0628\u0647 \u0627\u06cc\u0646 \u0645\u0639\u0646\u0627 \u0646\u06cc\u0633\u062a \u06a9\u0647 \u06a9\u0627\u0631\u0628\u0631 \u06cc\u06a9 Shell \u06a9\u0627\u0645\u0644 root \u062f\u0631\u06cc\u0627\u0641\u062a \u0645\u06cc\u200c\u06a9\u0646\u062f. \u0631\u0641\u062a\u0627\u0631 \u0646\u0647\u0627\u06cc\u06cc \u0628\u0647 \u0637\u0631\u0627\u062d\u06cc \u062f\u0627\u062e\u0644\u06cc \u0628\u0631\u0646\u0627\u0645\u0647 \u0628\u0633\u062a\u06af\u06cc \u062f\u0627\u0631\u062f.<\/p>\n<\/blockquote>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">\u067e\u06cc\u062f\u0627 \u06a9\u0631\u062f\u0646 \u0641\u0627\u06cc\u0644\u200c\u0647\u0627\u06cc SUID<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">\u0628\u0631\u0627\u06cc \u067e\u06cc\u062f\u0627 \u06a9\u0631\u062f\u0646 \u0641\u0627\u06cc\u0644\u200c\u0647\u0627\u06cc SUID \u062f\u0631 \u06a9\u0644 \u0641\u0627\u06cc\u0644\u200c\u0633\u06cc\u0633\u062a\u0645 \u062c\u0627\u0631\u06cc:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo find \/ \\\n-xdev \\\n-type f \\\n-perm -4000 \\\n-ls 2&gt;\/dev\/null\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u06af\u0632\u06cc\u0646\u0647\u200c\u0647\u0627:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>-xdev = Do not cross filesystem boundaries\n-type f = Match regular files\n-perm -4000 = Match files with SUID enabled\n-ls = Display detailed information\n<\/code><\/pre>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\">\u0646\u0645\u0627\u06cc\u0634 \u0641\u0642\u0637 \u0645\u0633\u06cc\u0631 \u0641\u0627\u06cc\u0644\u200c\u0647\u0627<\/h2>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo find \/ \\\n-xdev \\\n-type f \\\n-perm -4000 \\\n-print 2&gt;\/dev\/null\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0646\u0645\u0648\u0646\u0647 \u062e\u0631\u0648\u062c\u06cc:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>\/usr\/bin\/passwd\n\/usr\/bin\/su\n\/usr\/bin\/mount\n\/usr\/bin\/umount\n\/usr\/bin\/chsh\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0641\u0647\u0631\u0633\u062a \u0648\u0627\u0642\u0639\u06cc \u0628\u0647 \u062a\u0648\u0632\u06cc\u0639\u060c Package\u0647\u0627\u06cc \u0646\u0635\u0628\u200c\u0634\u062f\u0647 \u0648 \u062a\u0646\u0638\u06cc\u0645\u0627\u062a \u0633\u06cc\u0633\u062a\u0645 \u0628\u0633\u062a\u06af\u06cc \u062f\u0627\u0631\u062f.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\">\u062c\u0633\u062a\u200c\u0648\u062c\u0648 \u062f\u0631 \u06cc\u06a9 \u0645\u0633\u06cc\u0631 \u062e\u0627\u0635<\/h2>\n\n\n\n<pre class=\"wp-block-code\"><code>find \/usr\/bin \/usr\/sbin \\\n-type f \\\n-perm -4000 \\\n-ls 2&gt;\/dev\/null\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0628\u0631\u0627\u06cc \u0645\u0633\u06cc\u0631\u0647\u0627\u06cc Application:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>find \/usr\/local \/opt \\\n-type f \\\n-perm -4000 \\\n-ls 2&gt;\/dev\/null\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0641\u0627\u06cc\u0644\u200c\u0647\u0627\u06cc SUID \u063a\u06cc\u0631\u0645\u0646\u062a\u0638\u0631\u0647 \u062f\u0631 <code>\/tmp<\/code>\u060c <code>\/var\/tmp<\/code>\u060c Home \u06a9\u0627\u0631\u0628\u0631\u0627\u0646\u060c <code>\/opt<\/code> \u06cc\u0627 <code>\/usr\/local<\/code> \u0628\u0627\u06cc\u062f \u0628\u0627 \u062d\u0633\u0627\u0633\u06cc\u062a \u0628\u06cc\u0634\u062a\u0631\u06cc \u0628\u0631\u0631\u0633\u06cc \u0634\u0648\u0646\u062f.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">\u067e\u06cc\u062f\u0627 \u06a9\u0631\u062f\u0646 \u0641\u0627\u06cc\u0644\u200c\u0647\u0627\u06cc SUID \u0648 SGID<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">\u0628\u0631\u0627\u06cc \u067e\u06cc\u062f\u0627 \u06a9\u0631\u062f\u0646 \u0641\u0627\u06cc\u0644\u200c\u0647\u0627\u06cc\u06cc \u06a9\u0647 SUID \u06cc\u0627 SGID \u062f\u0627\u0631\u0646\u062f:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo find \/ \\\n-xdev \\\n-type f \\\n-perm \/6000 \\\n-ls 2&gt;\/dev\/null\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u062a\u0648\u0636\u06cc\u062d:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>4000 = SUID\n2000 = SGID\n6000 = SUID or SGID search mask\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0628\u0631\u0627\u06cc \u0641\u0642\u0637 SUID:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo find \/ -xdev -type f -perm -4000 -ls 2&gt;\/dev\/null\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0628\u0631\u0627\u06cc \u0641\u0642\u0637 SGID:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo find \/ -xdev -type f -perm -2000 -ls 2&gt;\/dev\/null\n<\/code><\/pre>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">\u062b\u0628\u062a \u0641\u0647\u0631\u0633\u062a \u0641\u0627\u06cc\u0644\u200c\u0647\u0627\u06cc SUID<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">\u0628\u0631\u0627\u06cc \u0627\u06cc\u062c\u0627\u062f Baseline:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo find \/ \\\n-xdev \\\n-type f \\\n-perm -4000 \\\n-printf '%m %u %g %p\\n' 2&gt;\/dev\/null \\\n| sort \\\n&gt; \/root\/suid-baseline.txt\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0645\u0634\u0627\u0647\u062f\u0647:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>less \/root\/suid-baseline.txt\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0646\u0645\u0648\u0646\u0647:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>4755 root root \/usr\/bin\/passwd\n4755 root root \/usr\/bin\/su\n4755 root root \/usr\/bin\/chsh\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u062f\u0631 \u0628\u0631\u0631\u0633\u06cc\u200c\u0647\u0627\u06cc \u0628\u0639\u062f\u06cc \u0645\u06cc\u200c\u062a\u0648\u0627\u0646 \u0641\u0647\u0631\u0633\u062a \u062c\u062f\u06cc\u062f \u0631\u0627 \u0645\u0642\u0627\u06cc\u0633\u0647 \u06a9\u0631\u062f:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo find \/ \\\n-xdev \\\n-type f \\\n-perm -4000 \\\n-printf '%m %u %g %p\\n' 2&gt;\/dev\/null \\\n| sort \\\n&gt; \/root\/suid-current.txt\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0645\u0642\u0627\u06cc\u0633\u0647:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>diff -u \\\n\/root\/suid-baseline.txt \\\n\/root\/suid-current.txt\n<\/code><\/pre>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">\u0628\u0631\u0631\u0633\u06cc Package \u0645\u0627\u0644\u06a9 \u0641\u0627\u06cc\u0644 SUID<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">\u062f\u0631 Ubuntu \u0648 Debian:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>dpkg -S \/usr\/bin\/passwd\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0646\u0645\u0648\u0646\u0647 \u062e\u0631\u0648\u062c\u06cc:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>passwd: \/usr\/bin\/passwd\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u062f\u0631 AlmaLinux\u060c Rocky Linux \u0648 RHEL:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>rpm -qf \/usr\/bin\/passwd\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0646\u0645\u0648\u0646\u0647 \u062e\u0631\u0648\u062c\u06cc:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>passwd-0.80-14.el9.x86_64\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0627\u06af\u0631 \u0641\u0627\u06cc\u0644 \u0628\u0647 \u0647\u06cc\u0686 Package \u0634\u0646\u0627\u062e\u062a\u0647\u200c\u0634\u062f\u0647\u200c\u0627\u06cc \u062a\u0639\u0644\u0642 \u0646\u062f\u0627\u0631\u062f\u060c \u0628\u0627\u06cc\u062f \u0645\u0646\u0628\u0639 \u0648 \u062f\u0644\u06cc\u0644 \u0648\u062c\u0648\u062f \u0622\u0646 \u0628\u0631\u0631\u0633\u06cc \u0634\u0648\u062f.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">\u0628\u0631\u0631\u0633\u06cc Hash \u0641\u0627\u06cc\u0644<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">\u0628\u0631\u0627\u06cc \u0645\u062d\u0627\u0633\u0628\u0647 Hash:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sha256sum \/usr\/bin\/passwd\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0646\u0645\u0648\u0646\u0647 \u062e\u0631\u0648\u062c\u06cc:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>f1c80a...  \/usr\/bin\/passwd\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0628\u0631\u0627\u06cc \u0686\u0646\u062f \u0641\u0627\u06cc\u0644:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo find \/usr\/bin \/usr\/sbin \\\n-type f \\\n-perm -4000 \\\n-exec sha256sum {} +\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Hash \u0641\u0642\u0637 \u0632\u0645\u0627\u0646\u06cc \u0645\u0641\u06cc\u062f \u0627\u0633\u062a \u06a9\u0647 \u0628\u0627 Baseline \u0645\u0639\u062a\u0628\u0631 \u06cc\u0627 Package \u0631\u0633\u0645\u06cc \u0645\u0642\u0627\u06cc\u0633\u0647 \u0634\u0648\u062f.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">\u0628\u0631\u0631\u0633\u06cc \u062a\u063a\u06cc\u06cc\u0631\u0627\u062a Package<\/h1>\n\n\n\n<h2 class=\"wp-block-heading\">Ubuntu \u0648 Debian<\/h2>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo dpkg -V passwd\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u062f\u0631 \u0635\u0648\u0631\u062a \u0648\u062c\u0648\u062f \u0641\u0627\u06cc\u0644\u200c\u0647\u0627\u06cc Checksum \u0645\u0631\u062a\u0628\u0637\u060c \u062a\u063a\u06cc\u06cc\u0631\u0627\u062a \u0627\u062d\u062a\u0645\u0627\u0644\u06cc \u06af\u0632\u0627\u0631\u0634 \u0645\u06cc\u200c\u0634\u0648\u0646\u062f.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">AlmaLinux \u0648 RHEL<\/h2>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo rpm -V passwd\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u062e\u0631\u0648\u062c\u06cc \u062e\u0627\u0644\u06cc \u0645\u0639\u0645\u0648\u0644\u0627\u064b \u0628\u0647 \u0627\u06cc\u0646 \u0645\u0639\u0646\u0627 \u0627\u0633\u062a \u06a9\u0647 \u0641\u0627\u06cc\u0644\u200c\u0647\u0627\u06cc Package \u0646\u0633\u0628\u062a \u0628\u0647 Metadata \u062b\u0628\u062a\u200c\u0634\u062f\u0647 \u062a\u063a\u06cc\u06cc\u0631 \u0645\u0647\u0645\u06cc \u0646\u062f\u0627\u0631\u0646\u062f.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u0647\u0631 \u062e\u0631\u0648\u062c\u06cc \u0628\u0627\u06cc\u062f \u0628\u0631\u0627\u0633\u0627\u0633 \u0645\u0639\u0646\u06cc \u0633\u062a\u0648\u0646\u200c\u0647\u0627\u06cc \u0627\u0628\u0632\u0627\u0631 Package Manager \u0628\u0631\u0631\u0633\u06cc \u0634\u0648\u062f.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">\u0622\u0632\u0645\u0627\u06cc\u0634 \u0627\u0645\u0646 SUID<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">\u0628\u0631\u0627\u06cc \u0645\u0634\u0627\u0647\u062f\u0647 \u062a\u0641\u0627\u0648\u062a Real UID \u0648 Effective UID \u0645\u06cc\u200c\u062a\u0648\u0627\u0646 \u06cc\u06a9 \u0628\u0631\u0646\u0627\u0645\u0647 \u0633\u0627\u062f\u0647 \u0622\u0632\u0645\u0627\u06cc\u0634\u06cc \u0633\u0627\u062e\u062a \u06a9\u0647 \u0641\u0642\u0637 \u0634\u0646\u0627\u0633\u0647\u200c\u0647\u0627 \u0631\u0627 \u0646\u0645\u0627\u06cc\u0634 \u062f\u0647\u062f \u0648 \u0647\u06cc\u0686 Command \u06cc\u0627 Shell \u062f\u06cc\u06af\u0631\u06cc \u0627\u062c\u0631\u0627 \u0646\u06a9\u0646\u062f.<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p class=\"wp-block-paragraph\">\u0627\u06cc\u0646 \u0622\u0632\u0645\u0627\u06cc\u0634 \u0631\u0627 \u0641\u0642\u0637 \u0631\u0648\u06cc \u0633\u06cc\u0633\u062a\u0645 \u0622\u0632\u0645\u0627\u06cc\u0634\u06cc \u0627\u0646\u062c\u0627\u0645 \u062f\u0647\u06cc\u062f \u0648 \u0641\u0627\u06cc\u0644 SUID \u0631\u0627 \u0628\u0644\u0627\u0641\u0627\u0635\u0644\u0647 \u0628\u0639\u062f \u0627\u0632 \u0622\u0632\u0645\u0627\u06cc\u0634 \u062d\u0630\u0641 \u06a9\u0646\u06cc\u062f.<\/p>\n<\/blockquote>\n\n\n\n<h2 class=\"wp-block-heading\">\u0645\u0631\u062d\u0644\u0647 \u0627\u0648\u0644: \u0627\u06cc\u062c\u0627\u062f \u06a9\u062f \u0622\u0632\u0645\u0627\u06cc\u0634\u06cc<\/h2>\n\n\n\n<pre class=\"wp-block-code\"><code>nano \/tmp\/suid-demo.c\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0645\u062d\u062a\u0648\u0627:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>#include &lt;stdio.h&gt;\n#include &lt;unistd.h&gt;\n\nint main(void) {\n    printf(\"Real UID: %d\\n\", getuid());\n    printf(\"Effective UID: %d\\n\", geteuid());\n    printf(\"Real GID: %d\\n\", getgid());\n    printf(\"Effective GID: %d\\n\", getegid());\n    return 0;\n}\n<\/code><\/pre>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\">\u0645\u0631\u062d\u0644\u0647 \u062f\u0648\u0645: \u0646\u0635\u0628 Compiler<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\u062f\u0631 Ubuntu:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo apt update\nsudo apt install build-essential -y\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u062f\u0631 AlmaLinux:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo dnf install gcc -y\n<\/code><\/pre>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\">\u0645\u0631\u062d\u0644\u0647 \u0633\u0648\u0645: Compile \u0628\u0631\u0646\u0627\u0645\u0647<\/h2>\n\n\n\n<pre class=\"wp-block-code\"><code>gcc \\\n-Wall \\\n-Wextra \\\n-O2 \\\n-o \/tmp\/suid-demo \\\n\/tmp\/suid-demo.c\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0628\u0631\u0631\u0633\u06cc:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>ls -l \/tmp\/suid-demo\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u062e\u0631\u0648\u062c\u06cc:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>-rwxr-xr-x 1 ali ali 16064 Jul 27 10:00 \/tmp\/suid-demo\n<\/code><\/pre>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\">\u0645\u0631\u062d\u0644\u0647 \u0686\u0647\u0627\u0631\u0645: \u0627\u0646\u062a\u0642\u0627\u0644 \u0628\u0647 \u0645\u0633\u06cc\u0631 \u0622\u0632\u0645\u0627\u06cc\u0634\u06cc<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\u0627\u0632 \u0627\u062c\u0631\u0627\u06cc SUID \u062f\u0627\u062e\u0644 <code>\/tmp<\/code> \u062e\u0648\u062f\u062f\u0627\u0631\u06cc \u06a9\u0646\u06cc\u062f\u061b \u0632\u06cc\u0631\u0627 \u0627\u06cc\u0646 \u0645\u0633\u06cc\u0631 \u062f\u0631 \u0628\u0633\u06cc\u0627\u0631\u06cc \u0627\u0632 \u0633\u06cc\u0633\u062a\u0645\u200c\u0647\u0627 \u0645\u0645\u06a9\u0646 \u0627\u0633\u062a \u0628\u0627 \u06af\u0632\u06cc\u0646\u0647\u200c\u0647\u0627\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc \u0645\u0627\u0646\u0646\u062f <code>nosuid<\/code> \u06cc\u0627 <code>noexec<\/code> Mount \u0634\u062f\u0647 \u0628\u0627\u0634\u062f.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo install \\\n-o root \\\n-g root \\\n-m 0755 \\\n\/tmp\/suid-demo \\\n\/usr\/local\/libexec\/suid-demo\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u062f\u0631 \u0635\u0648\u0631\u062a \u0646\u0628\u0648\u062f \u0645\u0633\u06cc\u0631:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo mkdir -p \/usr\/local\/libexec\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0633\u067e\u0633 \u062f\u0648\u0628\u0627\u0631\u0647 \u062f\u0633\u062a\u0648\u0631 <code>install<\/code> \u0631\u0627 \u0627\u062c\u0631\u0627 \u06a9\u0646\u06cc\u062f.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\">\u0645\u0631\u062d\u0644\u0647 \u067e\u0646\u062c\u0645: \u0627\u062c\u0631\u0627\u06cc \u0639\u0627\u062f\u06cc<\/h2>\n\n\n\n<pre class=\"wp-block-code\"><code>\/usr\/local\/libexec\/suid-demo\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0646\u0645\u0648\u0646\u0647 \u062e\u0631\u0648\u062c\u06cc \u0628\u0631\u0627\u06cc \u06a9\u0627\u0631\u0628\u0631 <code>ali<\/code>:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>Real UID: 1001\nEffective UID: 1001\nReal GID: 1001\nEffective GID: 1001\n<\/code><\/pre>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\">\u0645\u0631\u062d\u0644\u0647 \u0634\u0634\u0645: \u0641\u0639\u0627\u0644\u200c\u06a9\u0631\u062f\u0646 SUID<\/h2>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo chmod u+s \/usr\/local\/libexec\/suid-demo\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0628\u0631\u0631\u0633\u06cc:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>stat -c '%a %A %U %G %n' \\\n\/usr\/local\/libexec\/suid-demo\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u062e\u0631\u0648\u062c\u06cc:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>4755 -rwsr-xr-x root root \/usr\/local\/libexec\/suid-demo\n<\/code><\/pre>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\">\u0645\u0631\u062d\u0644\u0647 \u0647\u0641\u062a\u0645: \u0627\u062c\u0631\u0627\u06cc \u0645\u062c\u062f\u062f<\/h2>\n\n\n\n<pre class=\"wp-block-code\"><code>\/usr\/local\/libexec\/suid-demo\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u062e\u0631\u0648\u062c\u06cc \u0627\u062d\u062a\u0645\u0627\u0644\u06cc:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>Real UID: 1001\nEffective UID: 0\nReal GID: 1001\nEffective GID: 1001\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0627\u06cc\u0646 \u062e\u0631\u0648\u062c\u06cc \u0646\u0634\u0627\u0646 \u0645\u06cc\u200c\u062f\u0647\u062f:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>Real UID: Calling user\nEffective UID: File owner\n<\/code><\/pre>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\">\u0645\u0631\u062d\u0644\u0647 \u0647\u0634\u062a\u0645: \u067e\u0627\u06a9\u200c\u0633\u0627\u0632\u06cc \u0641\u0648\u0631\u06cc<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\u0627\u0628\u062a\u062f\u0627 SUID \u0631\u0627 \u062d\u0630\u0641 \u06a9\u0646\u06cc\u062f:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo chmod u-s \/usr\/local\/libexec\/suid-demo\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0633\u067e\u0633 \u0641\u0627\u06cc\u0644\u200c\u0647\u0627 \u0631\u0627 \u062d\u0630\u0641 \u06a9\u0646\u06cc\u062f:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo rm -f \/usr\/local\/libexec\/suid-demo\nrm -f \/tmp\/suid-demo \/tmp\/suid-demo.c\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0628\u0631\u0631\u0633\u06cc:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>test ! -e \/usr\/local\/libexec\/suid-demo \\\n&amp;&amp; echo \"SUID demo removed\"\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u062e\u0631\u0648\u062c\u06cc:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>SUID demo removed\n<\/code><\/pre>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">SUID \u0631\u0648\u06cc Shell Script<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">Linux \u0645\u0627\u0646\u0646\u062f \u0628\u06cc\u0634\u062a\u0631 \u0633\u06cc\u0633\u062a\u0645\u200c\u0647\u0627\u06cc Unix \u0645\u062f\u0631\u0646\u060c Bit\u0647\u0627\u06cc SUID \u0648 SGID \u0631\u0648\u06cc Interpreter Script\u0647\u0627 \u0631\u0627 \u0646\u0627\u062f\u06cc\u062f\u0647 \u0645\u06cc\u200c\u06af\u06cc\u0631\u062f. \u0628\u0646\u0627\u0628\u0631\u0627\u06cc\u0646 \u0642\u0631\u0627\u0631\u062f\u0627\u062f\u0646 SUID \u0631\u0648\u06cc \u06cc\u06a9 \u0641\u0627\u06cc\u0644 Bash\u060c Python \u06cc\u0627 PHP \u0645\u0639\u0645\u0648\u0644\u0627\u064b \u0628\u0627\u0639\u062b \u0627\u062c\u0631\u0627\u06cc Script \u0628\u0627 \u0645\u0627\u0644\u06a9 \u0641\u0627\u06cc\u0644 \u0646\u0645\u06cc\u200c\u0634\u0648\u062f. \u0627\u06cc\u0646 \u062a\u0635\u0645\u06cc\u0645 \u0628\u0647 \u062f\u0644\u06cc\u0644 \u0645\u0634\u06a9\u0644\u0627\u062a \u0627\u0645\u0646\u06cc\u062a\u06cc \u0648 Race Condition\u0647\u0627\u06cc \u0645\u0631\u062a\u0628\u0637 \u0628\u0627 \u0627\u062c\u0631\u0627\u06cc Script\u0647\u0627 \u0627\u0633\u062a.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u0645\u062b\u0627\u0644:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo chmod 4755 backup.sh\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0645\u0645\u06a9\u0646 \u0627\u0633\u062a <code>ls<\/code> \u0645\u0642\u062f\u0627\u0631 \u0632\u06cc\u0631 \u0631\u0627 \u0646\u0645\u0627\u06cc\u0634 \u062f\u0647\u062f:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>-rwsr-xr-x 1 root root 512 Jul 27 10:00 backup.sh\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0627\u0645\u0627 Linux \u0647\u0646\u06af\u0627\u0645 \u0627\u062c\u0631\u0627\u06cc \u0645\u0633\u062a\u0642\u06cc\u0645 Script\u060c SUID \u0631\u0627 \u0627\u0639\u0645\u0627\u0644 \u0646\u0645\u06cc\u200c\u06a9\u0646\u062f.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u0628\u0631\u0627\u06cc \u0627\u062c\u0631\u0627\u06cc \u06a9\u0646\u062a\u0631\u0644\u200c\u0634\u062f\u0647 \u0639\u0645\u0644\u06cc\u0627\u062a \u0645\u062f\u06cc\u0631\u06cc\u062a\u06cc \u0628\u0647\u062a\u0631 \u0627\u0633\u062a \u0627\u0632 \u0631\u0648\u0634\u200c\u0647\u0627\u06cc \u0632\u06cc\u0631 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0634\u0648\u062f:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo with restricted sudoers rules\nA reviewed compiled helper\nsystemd service or timer\nLinux file capabilities\nPolicyKit where appropriate\n<\/code><\/pre>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">\u062a\u0623\u062b\u06cc\u0631 \u06af\u0632\u06cc\u0646\u0647 nosuid<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">\u0627\u06af\u0631 \u0641\u0627\u06cc\u0644\u200c\u0633\u06cc\u0633\u062a\u0645 \u0628\u0627 \u06af\u0632\u06cc\u0646\u0647 <code>nosuid<\/code> Mount \u0634\u062f\u0647 \u0628\u0627\u0634\u062f\u060c SUID\u060c SGID \u0648 File Capability\u0647\u0627\u06cc \u0627\u062c\u0631\u0627\u06cc\u06cc \u0631\u0648\u06cc \u0622\u0646 \u0641\u0627\u06cc\u0644\u200c\u0633\u06cc\u0633\u062a\u0645 \u0627\u0639\u0645\u0627\u0644 \u0646\u0645\u06cc\u200c\u0634\u0648\u0646\u062f.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u0628\u0631\u0627\u06cc \u0628\u0631\u0631\u0633\u06cc Mount Option \u0645\u0633\u06cc\u0631:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>findmnt -T \/path\/to\/application \\\n-o TARGET,FSTYPE,OPTIONS\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0646\u0645\u0648\u0646\u0647 \u062e\u0631\u0648\u062c\u06cc:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>TARGET FSTYPE OPTIONS\n\/tmp   tmpfs  rw,nosuid,nodev\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0648\u062c\u0648\u062f <code>nosuid<\/code> \u0646\u0634\u0627\u0646 \u0645\u06cc\u200c\u062f\u0647\u062f Bit SUID \u062f\u0631 \u0622\u0646 \u0645\u0633\u06cc\u0631 \u0647\u0646\u06af\u0627\u0645 \u0627\u062c\u0631\u0627 \u0645\u0648\u0631\u062f \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0642\u0631\u0627\u0631 \u0646\u0645\u06cc\u200c\u06af\u06cc\u0631\u062f.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\">\u0628\u0631\u0631\u0633\u06cc \/tmp<\/h2>\n\n\n\n<pre class=\"wp-block-code\"><code>findmnt -T \/tmp \\\n-o TARGET,FSTYPE,OPTIONS\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0646\u0645\u0648\u0646\u0647:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>TARGET FSTYPE OPTIONS\n\/tmp   tmpfs  rw,nosuid,nodev,noexec\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u062f\u0631 \u0686\u0646\u06cc\u0646 \u0634\u0631\u0627\u06cc\u0637\u06cc:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>nosuid = Ignore SUID, SGID, and file capabilities\nnoexec = Prevent direct executable execution\nnodev = Ignore device files\n<\/code><\/pre>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">\u062f\u0644\u0627\u06cc\u0644 \u062f\u06cc\u06af\u0631 \u0646\u0627\u062f\u06cc\u062f\u0647\u200c\u06af\u0631\u0641\u062a\u0646 SUID<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">\u062a\u063a\u06cc\u06cc\u0631 Effective UID \u0646\u0627\u0634\u06cc \u0627\u0632 SUID \u062f\u0631 \u0628\u0639\u0636\u06cc \u0634\u0631\u0627\u06cc\u0637 \u0627\u0639\u0645\u0627\u0644 \u0646\u0645\u06cc\u200c\u0634\u0648\u062f\u060c \u0627\u0632 \u062c\u0645\u0644\u0647:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>no_new_privs is enabled\nFilesystem is mounted nosuid\nProcess is being ptraced\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0627\u06cc\u0646 \u0645\u062d\u062f\u0648\u062f\u06cc\u062a\u200c\u0647\u0627 \u062f\u0631 \u0631\u0641\u062a\u0627\u0631 <code>execve()<\/code> \u0644\u06cc\u0646\u0648\u06a9\u0633 \u062a\u0639\u0631\u06cc\u0641 \u0634\u062f\u0647\u200c\u0627\u0646\u062f.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u0628\u0631\u0627\u06cc \u0628\u0631\u0631\u0633\u06cc <code>NoNewPrivs<\/code> \u06cc\u06a9 \u067e\u0631\u062f\u0627\u0632\u0634:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>grep '^NoNewPrivs:' \/proc\/$$\/status\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0646\u0645\u0648\u0646\u0647 \u062e\u0631\u0648\u062c\u06cc:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>NoNewPrivs:\t0\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0645\u0642\u062f\u0627\u0631 <code>1<\/code> \u0646\u0634\u0627\u0646 \u0645\u06cc\u200c\u062f\u0647\u062f Process \u0627\u062c\u0627\u0632\u0647 \u06a9\u0633\u0628 Privilege \u062c\u062f\u06cc\u062f \u0627\u0632 \u0637\u0631\u06cc\u0642 SUID \u06cc\u0627 File Capability \u0631\u0627 \u0646\u062f\u0627\u0631\u062f.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">SUID \u0648 SELinux<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">SUID \u0628\u062e\u0634\u06cc \u0627\u0632 Permission\u0647\u0627\u06cc Unix \u0627\u0633\u062a\u060c \u0627\u0645\u0627 SELinux \u06cc\u06a9 \u0644\u0627\u06cc\u0647 \u0627\u0645\u0646\u06cc\u062a\u06cc \u062c\u062f\u0627\u06af\u0627\u0646\u0647 \u0627\u06cc\u062c\u0627\u062f \u0645\u06cc\u200c\u06a9\u0646\u062f.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u062f\u0631 AlmaLinux\u060c Rocky Linux \u0648 RHEL \u0648\u0636\u0639\u06cc\u062a SELinux \u0631\u0627 \u0628\u0631\u0631\u0633\u06cc \u06a9\u0646\u06cc\u062f:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>getenforce\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0646\u0645\u0648\u0646\u0647:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>Enforcing\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Context \u0641\u0627\u06cc\u0644:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>ls -Z \/path\/to\/application\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u06a9\u0627\u0631\u0628\u0631\u0627\u0646 SELinux \u0645\u062d\u062f\u0648\u062f\u0634\u062f\u0647 \u0645\u0645\u06a9\u0646 \u0627\u0633\u062a \u0641\u0642\u0637 \u062f\u0631 \u0635\u0648\u0631\u062a\u06cc \u0628\u062a\u0648\u0627\u0646\u0646\u062f \u0628\u0631\u0646\u0627\u0645\u0647\u200c\u0647\u0627\u06cc SetUID \u0631\u0627 \u0627\u062c\u0631\u0627 \u06a9\u0646\u0646\u062f \u06a9\u0647 Policy \u0627\u062c\u0627\u0632\u0647 \u062f\u0647\u062f.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u062e\u0637\u0627\u0647\u0627\u06cc \u0627\u062e\u06cc\u0631:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo ausearch -m AVC -ts recent\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0628\u0631\u0627\u06cc \u0628\u0627\u0632\u06af\u0631\u062f\u0627\u0646\u062f\u0646 Context \u0627\u0633\u062a\u0627\u0646\u062f\u0627\u0631\u062f:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo restorecon -v \/path\/to\/application\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">SUID \u062c\u0627\u06cc\u06af\u0632\u06cc\u0646 \u062a\u0646\u0638\u06cc\u0645 \u0635\u062d\u06cc\u062d SELinux \u0646\u06cc\u0633\u062a.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">SUID \u0648 AppArmor<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">\u062f\u0631 Ubuntu \u0645\u0645\u06a9\u0646 \u0627\u0633\u062a AppArmor \u0631\u0641\u062a\u0627\u0631 \u0628\u0631\u0646\u0627\u0645\u0647 \u0631\u0627 \u0645\u062d\u062f\u0648\u062f \u06a9\u0646\u062f\u061b \u062d\u062a\u06cc \u0627\u06af\u0631 SUID \u0641\u0639\u0627\u0644 \u0628\u0627\u0634\u062f.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u0628\u0631\u0631\u0633\u06cc \u0648\u0636\u0639\u06cc\u062a:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo aa-status\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Log\u0647\u0627\u06cc \u0627\u062d\u062a\u0645\u0627\u0644\u06cc:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo journalctl -k | grep -i apparmor\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0648\u062c\u0648\u062f SUID \u0628\u0647\u200c\u062a\u0646\u0647\u0627\u06cc\u06cc \u062a\u0636\u0645\u06cc\u0646 \u0646\u0645\u06cc\u200c\u06a9\u0646\u062f \u0628\u0631\u0646\u0627\u0645\u0647 \u0628\u062a\u0648\u0627\u0646\u062f \u062e\u0627\u0631\u062c \u0627\u0632 Policy \u0627\u0645\u0646\u06cc\u062a\u06cc \u0641\u0639\u0627\u0644\u06cc\u062a \u06a9\u0646\u062f.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">\u062e\u0637\u0631\u0627\u062a \u0627\u0645\u0646\u06cc\u062a\u06cc SUID<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">\u06cc\u06a9 \u0641\u0627\u06cc\u0644 SUID \u0645\u062a\u0639\u0644\u0642 \u0628\u0647 root \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0647\u062f\u0641 \u0645\u0647\u0645\u06cc \u0628\u0631\u0627\u06cc \u0645\u0647\u0627\u062c\u0645 \u0628\u0627\u0634\u062f.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u062e\u0637\u0631\u0627\u062a \u0631\u0627\u06cc\u062c:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>Command injection\nPath hijacking\nUnsafe environment variables\nBuffer overflow\nRace conditions\nInsecure temporary files\nArbitrary file overwrite\nUntrusted configuration loading\nUnsafe library loading\nPrivilege retention\nShell escape\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0627\u06af\u0631 \u0645\u0647\u0627\u062c\u0645 \u0628\u062a\u0648\u0627\u0646\u062f \u0631\u0641\u062a\u0627\u0631 \u06cc\u06a9 \u0628\u0631\u0646\u0627\u0645\u0647 SUID \u0631\u0627 \u06a9\u0646\u062a\u0631\u0644 \u06a9\u0646\u062f\u060c \u0645\u0645\u06a9\u0646 \u0627\u0633\u062a \u0639\u0645\u0644\u06cc\u0627\u062a \u0631\u0627 \u0628\u0627 Effective UID \u0645\u0627\u0644\u06a9 \u0641\u0627\u06cc\u0644 \u0627\u0646\u062c\u0627\u0645 \u062f\u0647\u062f.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">\u062e\u0637\u0631 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 PATH \u0646\u0633\u0628\u06cc<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">\u06cc\u06a9 \u0628\u0631\u0646\u0627\u0645\u0647 SUID \u0646\u0628\u0627\u06cc\u062f Command\u0647\u0627 \u0631\u0627 \u0641\u0642\u0637 \u0628\u0627 \u0646\u0627\u0645 \u0627\u062c\u0631\u0627 \u06a9\u0646\u062f.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u0646\u0645\u0648\u0646\u0647 \u0646\u0627\u0627\u0645\u0646:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>system(\"backup-tool\");\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u062f\u0631 \u0627\u06cc\u0646 \u062d\u0627\u0644\u062a \u0645\u0645\u06a9\u0646 \u0627\u0633\u062a \u0628\u0631\u0646\u0627\u0645\u0647 \u0628\u0631\u0627\u0633\u0627\u0633 <code>PATH<\/code> \u06a9\u0627\u0631\u0628\u0631\u060c Binary \u0627\u0634\u062a\u0628\u0627\u0647\u06cc \u0631\u0627 \u0627\u062c\u0631\u0627 \u06a9\u0646\u062f.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u0631\u0648\u0634 \u0645\u0646\u0627\u0633\u0628\u200c\u062a\u0631 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0645\u0633\u06cc\u0631 Absolute \u0648 \u062d\u0630\u0641 \u0648\u0627\u0628\u0633\u062a\u06af\u06cc \u0628\u0647 Shell \u0627\u0633\u062a:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>\/usr\/local\/sbin\/backup-tool\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u062d\u062a\u06cc \u0628\u0627 \u0645\u0633\u06cc\u0631 Absolute\u060c \u0648\u0631\u0648\u062f\u06cc\u200c\u0647\u0627 \u0648 Environment \u0628\u0627\u06cc\u062f \u062f\u0642\u06cc\u0642 \u0628\u0631\u0631\u0633\u06cc \u0634\u0648\u0646\u062f.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">\u062e\u0637\u0631 system() \u0648 Shell<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u062a\u0648\u0627\u0628\u0639\u06cc \u06a9\u0647 Shell \u0627\u062c\u0631\u0627 \u0645\u06cc\u200c\u06a9\u0646\u0646\u062f \u062f\u0631 \u0628\u0631\u0646\u0627\u0645\u0647\u200c\u0647\u0627\u06cc Privileged \u062e\u0637\u0631\u0646\u0627\u06a9 \u0627\u0633\u062a.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u0646\u0645\u0648\u0646\u0647\u200c\u0647\u0627\u06cc \u062d\u0633\u0627\u0633:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>system()\npopen()\nexeclp()\nexecvp()\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0646\u0627\u0627\u0645\u0646 \u0627\u0632 \u0648\u0631\u0648\u062f\u06cc \u06a9\u0627\u0631\u0628\u0631 \u062f\u0631 \u0627\u06cc\u0646 \u062a\u0648\u0627\u0628\u0639 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f Command Injection \u0627\u06cc\u062c\u0627\u062f \u06a9\u0646\u062f.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u062f\u0631 \u0628\u0631\u0646\u0627\u0645\u0647\u200c\u0647\u0627\u06cc Privileged \u0628\u0647\u062a\u0631 \u0627\u0633\u062a:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>\u0627\u0632 Shell \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0646\u0634\u0648\u062f.<\/li>\n\n\n\n<li>Argument\u0647\u0627 \u0628\u0647\u200c\u0635\u0648\u0631\u062a \u062b\u0627\u0628\u062a \u0648 \u06a9\u0646\u062a\u0631\u0644\u200c\u0634\u062f\u0647 \u0628\u0627\u0634\u0646\u062f.<\/li>\n\n\n\n<li>\u0645\u0633\u06cc\u0631 \u06a9\u0627\u0645\u0644 Binary \u0645\u0634\u062e\u0635 \u0634\u0648\u062f.<\/li>\n\n\n\n<li>Environment \u067e\u0627\u06a9\u200c\u0633\u0627\u0632\u06cc \u0634\u0648\u062f.<\/li>\n\n\n\n<li>File Descriptor\u0647\u0627\u06cc \u0627\u0636\u0627\u0641\u06cc \u0628\u0633\u062a\u0647 \u0634\u0648\u0646\u062f.<\/li>\n\n\n\n<li>Privilege \u062f\u0631 \u0627\u0648\u0644\u06cc\u0646 \u0641\u0631\u0635\u062a Drop \u0634\u0648\u062f.<\/li>\n<\/ul>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">\u0641\u0627\u06cc\u0644 SUID \u0646\u0628\u0627\u06cc\u062f \u0642\u0627\u0628\u0644\u200c\u0646\u0648\u0634\u062a\u0646 \u0628\u0627\u0634\u062f<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">\u0641\u0627\u06cc\u0644 SUID \u0645\u062a\u0639\u0644\u0642 \u0628\u0647 root \u0646\u0628\u0627\u06cc\u062f \u062a\u0648\u0633\u0637 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0645\u0639\u0645\u0648\u0644\u06cc \u06cc\u0627 \u06af\u0631\u0648\u0647 \u063a\u06cc\u0631\u0642\u0627\u0628\u0644\u200c\u0627\u0639\u062a\u0645\u0627\u062f Write \u0634\u0648\u062f.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u0628\u0631\u0631\u0633\u06cc:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>stat -c '%a %A %U %G %n' \/path\/to\/application\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0646\u0645\u0648\u0646\u0647 \u0627\u0645\u0646\u200c\u062a\u0631:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>4755 -rwsr-xr-x root root \/path\/to\/application\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0646\u0645\u0648\u0646\u0647 \u0628\u0633\u06cc\u0627\u0631 \u062e\u0637\u0631\u0646\u0627\u06a9:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>4777 -rwsrwxrwx root root \/path\/to\/application\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0627\u06af\u0631 \u06a9\u0627\u0631\u0628\u0631 \u0628\u062a\u0648\u0627\u0646\u062f \u0645\u062d\u062a\u0648\u0627\u06cc Binary SUID \u0631\u0627 \u062a\u063a\u06cc\u06cc\u0631 \u062f\u0647\u062f\u060c \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u06a9\u062f \u062f\u0644\u062e\u0648\u0627\u0647 \u0631\u0627 \u0628\u0627 \u062f\u0633\u062a\u0631\u0633\u06cc \u0645\u0627\u0644\u06a9 \u0641\u0627\u06cc\u0644 \u0627\u062c\u0631\u0627 \u06a9\u0646\u062f.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">\u0628\u0631\u0631\u0633\u06cc \u0641\u0627\u06cc\u0644\u200c\u0647\u0627\u06cc SUID \u0642\u0627\u0628\u0644\u200c\u0646\u0648\u0634\u062a\u0646<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">\u067e\u06cc\u062f\u0627\u06a9\u0631\u062f\u0646 \u0641\u0627\u06cc\u0644\u200c\u0647\u0627\u06cc SUID \u06a9\u0647 \u0628\u0631\u0627\u06cc Group \u06cc\u0627 Other \u0642\u0627\u0628\u0644\u200c\u0646\u0648\u0634\u062a\u0646 \u0647\u0633\u062a\u0646\u062f:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo find \/ \\\n-xdev \\\n-type f \\\n-perm -4000 \\\n\\( -perm -0020 -o -perm -0002 \\) \\\n-ls 2&gt;\/dev\/null\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u062e\u0631\u0648\u062c\u06cc \u0627\u06cc\u0646 \u062f\u0633\u062a\u0648\u0631 \u0628\u0627\u06cc\u062f \u0628\u0627 \u062d\u0633\u0627\u0633\u06cc\u062a \u0628\u0631\u0631\u0633\u06cc \u0634\u0648\u062f.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u0628\u0631\u0627\u06cc \u0645\u0633\u06cc\u0631\u0647\u0627\u06cc \u0645\u062d\u0644\u06cc:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo find \/usr\/local \/opt \\\n-type f \\\n-perm -4000 \\\n\\( -perm -0020 -o -perm -0002 \\) \\\n-ls 2&gt;\/dev\/null\n<\/code><\/pre>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">\u0628\u0631\u0631\u0633\u06cc \u067e\u0648\u0634\u0647\u200c\u0647\u0627\u06cc \u0648\u0627\u0644\u062f \u0641\u0627\u06cc\u0644 SUID<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">\u062d\u062a\u06cc \u0627\u06af\u0631 \u062e\u0648\u062f \u0641\u0627\u06cc\u0644 \u0627\u0645\u0646 \u0628\u0627\u0634\u062f\u060c \u067e\u0648\u0634\u0647\u200c\u0647\u0627\u06cc \u0648\u0627\u0644\u062f \u0622\u0646 \u0646\u06cc\u0632 \u0646\u0628\u0627\u06cc\u062f \u062a\u0648\u0633\u0637 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u063a\u06cc\u0631\u0645\u062c\u0627\u0632 \u0642\u0627\u0628\u0644\u200c\u0646\u0648\u0634\u062a\u0646 \u0628\u0627\u0634\u0646\u062f.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>namei -l \/usr\/local\/libexec\/application\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0646\u0645\u0648\u0646\u0647:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>f: \/usr\/local\/libexec\/application\ndrwxr-xr-x root root \/\ndrwxr-xr-x root root usr\ndrwxr-xr-x root root local\ndrwxr-xr-x root root libexec\n-rwsr-xr-x root root application\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0627\u06af\u0631 \u067e\u0648\u0634\u0647 \u0648\u0627\u0644\u062f \u0628\u0631\u0627\u06cc \u06cc\u06a9 \u06a9\u0627\u0631\u0628\u0631 \u063a\u06cc\u0631\u0645\u062c\u0627\u0632 \u0642\u0627\u0628\u0644\u200c\u0646\u0648\u0634\u062a\u0646 \u0628\u0627\u0634\u062f\u060c \u0645\u0645\u06a9\u0646 \u0627\u0633\u062a \u0627\u0645\u06a9\u0627\u0646 \u062c\u0627\u06cc\u06af\u0632\u06cc\u0646\u06cc \u0641\u0627\u06cc\u0644 \u06cc\u0627 \u062a\u063a\u06cc\u06cc\u0631 \u0645\u0633\u06cc\u0631 \u0641\u0631\u0627\u0647\u0645 \u0634\u0648\u062f.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">\u0627\u062b\u0631 chown \u0631\u0648\u06cc SUID<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">\u062a\u063a\u06cc\u06cc\u0631 \u0645\u0627\u0644\u06a9\u06cc\u062a \u06cc\u06a9 \u0641\u0627\u06cc\u0644 \u0627\u062c\u0631\u0627\u06cc\u06cc \u0645\u0645\u06a9\u0646 \u0627\u0633\u062a \u0628\u0627\u0639\u062b \u067e\u0627\u06a9\u200c\u0634\u062f\u0646 Bit\u0647\u0627\u06cc SUID \u06cc\u0627 SGID \u0634\u0648\u062f.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u0642\u0628\u0644 \u0627\u0632 \u062a\u063a\u06cc\u06cc\u0631:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>stat -c '%a %A %U %G %n' application\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u062e\u0631\u0648\u062c\u06cc:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>4755 -rwsr-xr-x root root application\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u062a\u063a\u06cc\u06cc\u0631 \u0645\u0627\u0644\u06a9:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo chown ali:developers application\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0628\u0631\u0631\u0633\u06cc \u0645\u062c\u062f\u062f:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>stat -c '%a %A %U %G %n' application\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0645\u0645\u06a9\u0646 \u0627\u0633\u062a SUID \u067e\u0627\u06a9 \u0634\u062f\u0647 \u0628\u0627\u0634\u062f. GNU Coreutils \u0646\u06cc\u0632 \u0627\u0634\u0627\u0631\u0647 \u0645\u06cc\u200c\u06a9\u0646\u062f \u06a9\u0647 \u0639\u0645\u0644\u06cc\u0627\u062a \u062a\u063a\u06cc\u06cc\u0631 \u0645\u0627\u0644\u06a9\u06cc\u062a \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f Bit\u0647\u0627\u06cc Set-User-ID \u06cc\u0627 Set-Group-ID \u0631\u0627 \u062d\u0630\u0641 \u06a9\u0646\u062f.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u0628\u0639\u062f \u0627\u0632 \u0647\u0631 <code>chown<\/code> \u0631\u0648\u06cc \u0641\u0627\u06cc\u0644 Privileged\u060c Permission\u0647\u0627 \u0631\u0627 \u062f\u0648\u0628\u0627\u0631\u0647 \u0628\u0631\u0631\u0633\u06cc \u06a9\u0646\u06cc\u062f.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">\u0627\u062b\u0631 chmod \u0631\u0648\u06cc SUID<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">\u062f\u0633\u062a\u0648\u0631 \u0632\u06cc\u0631 SUID \u0631\u0627 \u0628\u0647\u200c\u0635\u0648\u0631\u062a \u0635\u0631\u06cc\u062d \u062d\u0630\u0641 \u0645\u06cc\u200c\u06a9\u0646\u062f:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo chmod u-s application\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0627\u0645\u0627 \u062f\u0631 Directory\u0647\u0627\u060c \u0631\u0641\u062a\u0627\u0631 Mode\u0647\u0627\u06cc \u0639\u062f\u062f\u06cc \u06a9\u0648\u062a\u0627\u0647 \u0645\u0645\u06a9\u0646 \u0627\u0633\u062a \u0628\u0633\u062a\u0647 \u0628\u0647 \u067e\u06cc\u0627\u062f\u0647\u200c\u0633\u0627\u0632\u06cc \u062f\u0631 \u062d\u0641\u0638 \u06cc\u0627 \u062d\u0630\u0641 Bit\u0647\u0627\u06cc \u0648\u06cc\u0698\u0647 \u0645\u062a\u0641\u0627\u0648\u062a \u0628\u0627\u0634\u062f. \u0628\u0631\u0627\u06cc \u062a\u063a\u06cc\u06cc\u0631 \u0642\u0627\u0628\u0644\u200c\u067e\u06cc\u0634\u200c\u0628\u06cc\u0646\u06cc\u060c Bit \u0648\u06cc\u0698\u0647 \u0631\u0627 \u0628\u0647\u200c\u0635\u0648\u0631\u062a \u0635\u0631\u06cc\u062d \u0645\u0634\u062e\u0635 \u06a9\u0646\u06cc\u062f.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u0628\u0631\u0631\u0633\u06cc \u0647\u0645\u06cc\u0634\u0647 \u0644\u0627\u0632\u0645 \u0627\u0633\u062a:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>stat -c '%a %A %n' application\n<\/code><\/pre>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">SUID \u0631\u0648\u06cc Directory<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">\u062f\u0631 Linux\u060c SUID \u0631\u0648\u06cc Directory \u0631\u0641\u062a\u0627\u0631 \u06a9\u0627\u0631\u0628\u0631\u062f\u06cc \u0648 \u0642\u0627\u0628\u0644\u200c\u0627\u062a\u06a9\u0627\u06cc \u0639\u0645\u0648\u0645\u06cc \u0645\u0634\u0627\u0628\u0647 \u0641\u0627\u06cc\u0644 \u0627\u062c\u0631\u0627\u06cc\u06cc \u0646\u062f\u0627\u0631\u062f. GNU \u0646\u06cc\u0632 \u062a\u0648\u0636\u06cc\u062d \u0645\u06cc\u200c\u062f\u0647\u062f \u06a9\u0647 \u0631\u0641\u062a\u0627\u0631 Set-User-ID \u0631\u0648\u06cc Directory \u062f\u0631 \u0633\u06cc\u0633\u062a\u0645\u200c\u0647\u0627\u06cc \u0645\u062e\u062a\u0644\u0641 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0645\u062a\u0641\u0627\u0648\u062a \u06cc\u0627 \u0646\u0627\u062f\u06cc\u062f\u0647 \u06af\u0631\u0641\u062a\u0647 \u0634\u0648\u062f.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u0628\u0631\u0627\u06cc \u0627\u0631\u062b\u200c\u0628\u0631\u06cc \u06af\u0631\u0648\u0647 \u062f\u0631 \u067e\u0648\u0634\u0647\u200c\u0647\u0627\u06cc \u0627\u0634\u062a\u0631\u0627\u06a9\u06cc \u0628\u0627\u06cc\u062f \u0627\u0632 SGID \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0634\u0648\u062f:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo chmod 2770 \/srv\/developers\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0628\u0631\u0627\u06cc \u0645\u062d\u062f\u0648\u062f\u06a9\u0631\u062f\u0646 \u062d\u0630\u0641 \u0641\u0627\u06cc\u0644\u200c\u0647\u0627\u06cc \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u062f\u06cc\u06af\u0631 \u062f\u0631 \u067e\u0648\u0634\u0647 \u0639\u0645\u0648\u0645\u06cc \u0628\u0627\u06cc\u062f \u0627\u0632 Sticky Bit \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0634\u0648\u062f:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo chmod 1777 \/srv\/shared\n<\/code><\/pre>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">\u062a\u0641\u0627\u0648\u062a SUID\u060c SGID \u0648 Sticky Bit<\/h1>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><thead><tr><th>Permission<\/th><th>\u0645\u0642\u062f\u0627\u0631<\/th><th>\u06a9\u0627\u0631\u0628\u0631\u062f \u0627\u0635\u0644\u06cc<\/th><\/tr><\/thead><tbody><tr><td>SUID<\/td><td><code>4<\/code><\/td><td>\u0627\u062c\u0631\u0627\u06cc \u0641\u0627\u06cc\u0644 \u0628\u0627 Effective UID \u0645\u0627\u0644\u06a9<\/td><\/tr><tr><td>SGID<\/td><td><code>2<\/code><\/td><td>\u0627\u062c\u0631\u0627\u06cc \u0641\u0627\u06cc\u0644 \u0628\u0627 \u06af\u0631\u0648\u0647 \u0645\u0627\u0644\u06a9 \u06cc\u0627 \u0627\u0631\u062b\u200c\u0628\u0631\u06cc \u06af\u0631\u0648\u0647 \u062f\u0631 \u067e\u0648\u0634\u0647<\/td><\/tr><tr><td>Sticky Bit<\/td><td><code>1<\/code><\/td><td>\u0645\u062d\u062f\u0648\u062f\u06a9\u0631\u062f\u0646 \u062d\u0630\u0641 \u0648 Rename \u062f\u0631 \u067e\u0648\u0634\u0647 \u0627\u0634\u062a\u0631\u0627\u06a9\u06cc<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">\u0646\u0645\u0648\u0646\u0647\u200c\u0647\u0627:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>4755 = SUID executable\n2755 = SGID executable\n2770 = SGID shared directory\n1777 = Sticky shared directory\n<\/code><\/pre>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">\u062a\u0641\u0627\u0648\u062a SUID \u0628\u0627 sudo<\/h1>\n\n\n\n<h2 class=\"wp-block-heading\">SUID<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Bit \u0631\u0648\u06cc \u0641\u0627\u06cc\u0644 \u0627\u062c\u0631\u0627\u06cc\u06cc \u062b\u0628\u062a \u0645\u06cc\u200c\u0634\u0648\u062f.<\/li>\n\n\n\n<li>\u0628\u0631\u0627\u06cc \u0647\u0631 \u0627\u062c\u0631\u0627\u06cc \u0641\u0627\u06cc\u0644 \u0641\u0639\u0627\u0644 \u0627\u0633\u062a.<\/li>\n\n\n\n<li>\u0628\u0631\u0646\u0627\u0645\u0647 \u0628\u0627\u06cc\u062f \u0627\u0632 \u0627\u0628\u062a\u062f\u0627 \u0628\u0631\u0627\u06cc Privileged Execution \u0637\u0631\u0627\u062d\u06cc \u0634\u062f\u0647 \u0628\u0627\u0634\u062f.<\/li>\n\n\n\n<li>\u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc Binary \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u062e\u0637\u0631 \u062c\u062f\u06cc \u0627\u06cc\u062c\u0627\u062f \u06a9\u0646\u062f.<\/li>\n\n\n\n<li>\u06a9\u0646\u062a\u0631\u0644 \u06a9\u0627\u0631\u0628\u0631 \u0648 Argument\u0647\u0627 \u062f\u0627\u062e\u0644 \u062e\u0648\u062f \u0628\u0631\u0646\u0627\u0645\u0647 \u0627\u0646\u062c\u0627\u0645 \u0645\u06cc\u200c\u0634\u0648\u062f.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">sudo<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li>\u062f\u0633\u062a\u0631\u0633\u06cc \u062f\u0631 \u0641\u0627\u06cc\u0644 sudoers \u062a\u0639\u0631\u06cc\u0641 \u0645\u06cc\u200c\u0634\u0648\u062f.<\/li>\n\n\n\n<li>\u0645\u06cc\u200c\u062a\u0648\u0627\u0646 \u06a9\u0627\u0631\u0628\u0631\u060c \u06af\u0631\u0648\u0647\u060c Command \u0648 Argument \u0631\u0627 \u0645\u062d\u062f\u0648\u062f \u06a9\u0631\u062f.<\/li>\n\n\n\n<li>\u0641\u0639\u0627\u0644\u06cc\u062a\u200c\u0647\u0627 \u062b\u0628\u062a \u0645\u06cc\u200c\u0634\u0648\u0646\u062f.<\/li>\n\n\n\n<li>\u0627\u0645\u06a9\u0627\u0646 \u062f\u0631\u062e\u0648\u0627\u0633\u062a \u0631\u0645\u0632 \u0648\u062c\u0648\u062f \u062f\u0627\u0631\u062f.<\/li>\n\n\n\n<li>Rule\u0647\u0627 \u0628\u062f\u0648\u0646 \u062a\u063a\u06cc\u06cc\u0631 Binary \u0642\u0627\u0628\u0644 \u0645\u062f\u06cc\u0631\u06cc\u062a \u0647\u0633\u062a\u0646\u062f.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">\u0628\u0631\u0627\u06cc \u0628\u0633\u06cc\u0627\u0631\u06cc \u0627\u0632 \u0648\u0638\u0627\u06cc\u0641 \u0645\u062f\u06cc\u0631\u06cc\u062a\u06cc\u060c sudo \u0628\u0627 Rule \u0645\u062d\u062f\u0648\u062f \u0627\u0646\u062a\u062e\u0627\u0628 \u0645\u0646\u0627\u0633\u0628\u200c\u062a\u0631\u06cc \u0646\u0633\u0628\u062a \u0628\u0647 \u0633\u0627\u062e\u062a \u0641\u0627\u06cc\u0644 SUID \u062c\u062f\u06cc\u062f \u0627\u0633\u062a.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u0646\u0645\u0648\u0646\u0647 Rule:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>ali ALL=(root) \/usr\/bin\/systemctl restart nginx\n<\/code><\/pre>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">\u062a\u0641\u0627\u0648\u062a SUID \u0628\u0627 Linux Capabilities<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">\u062f\u0631 \u0645\u062f\u0644 \u0633\u0646\u062a\u06cc Unix\u060c Effective UID \u0628\u0631\u0627\u0628\u0631 \u0635\u0641\u0631 \u062f\u0633\u062a\u0631\u0633\u06cc \u06af\u0633\u062a\u0631\u062f\u0647 root \u0627\u06cc\u062c\u0627\u062f \u0645\u06cc\u200c\u06a9\u0646\u062f. Linux Capabilities \u0627\u06cc\u0646 \u062f\u0633\u062a\u0631\u0633\u06cc \u0631\u0627 \u0628\u0647 \u0645\u062c\u0645\u0648\u0639\u0647\u200c\u0627\u06cc \u0627\u0632 Privilege\u0647\u0627\u06cc \u06a9\u0648\u0686\u06a9\u200c\u062a\u0631 \u062a\u0642\u0633\u06cc\u0645 \u0645\u06cc\u200c\u06a9\u0646\u062f.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u0628\u0631\u0627\u06cc \u0645\u062b\u0627\u0644\u060c \u0628\u0631\u0646\u0627\u0645\u0647\u200c\u0627\u06cc \u06a9\u0647 \u0641\u0642\u0637 \u0628\u0627\u06cc\u062f \u0631\u0648\u06cc \u067e\u0648\u0631\u062a \u06a9\u0645\u062a\u0631 \u0627\u0632 <code>1024<\/code> Listen \u06a9\u0646\u062f\u060c \u0645\u0645\u06a9\u0646 \u0627\u0633\u062a \u0628\u0647\u200c\u062c\u0627\u06cc SUID root \u0641\u0642\u0637 Capability \u0632\u06cc\u0631 \u0631\u0627 \u062f\u0631\u06cc\u0627\u0641\u062a \u06a9\u0646\u062f:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>CAP_NET_BIND_SERVICE\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0628\u0631\u0631\u0633\u06cc Capability:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>getcap \/usr\/local\/bin\/myserver\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u062a\u0639\u0631\u06cc\u0641 Capability:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo setcap \\\n'cap_net_bind_service=+ep' \\\n\/usr\/local\/bin\/myserver\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0628\u0631\u0631\u0633\u06cc:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>getcap \/usr\/local\/bin\/myserver\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u062e\u0631\u0648\u062c\u06cc:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>\/usr\/local\/bin\/myserver cap_net_bind_service=ep\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0627\u0628\u0632\u0627\u0631 <code>setcap<\/code> \u0628\u0631\u0627\u06cc \u062a\u0646\u0638\u06cc\u0645 File Capability \u0648 <code>getcap<\/code> \u0628\u0631\u0627\u06cc \u0645\u0634\u0627\u0647\u062f\u0647 \u0622\u0646 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f.<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p class=\"wp-block-paragraph\">Capability \u0646\u06cc\u0632 \u06cc\u06a9 Privilege \u0627\u0645\u0646\u06cc\u062a\u06cc \u0627\u0633\u062a \u0648 \u0628\u0627\u06cc\u062f \u0641\u0642\u0637 \u062f\u0631 \u062d\u062f \u0646\u06cc\u0627\u0632 \u0628\u0631\u0646\u0627\u0645\u0647 \u062a\u0639\u0631\u06cc\u0641 \u0634\u0648\u062f.<\/p>\n<\/blockquote>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">\u062d\u0630\u0641 File Capability<\/h1>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo setcap -r \/usr\/local\/bin\/myserver\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0628\u0631\u0631\u0633\u06cc:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>getcap \/usr\/local\/bin\/myserver\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u062f\u0631 \u0635\u0648\u0631\u062a \u062d\u0630\u0641 \u0645\u0648\u0641\u0642\u060c \u062e\u0631\u0648\u062c\u06cc \u062e\u0627\u0644\u06cc \u062e\u0648\u0627\u0647\u062f \u0628\u0648\u062f.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">\u0628\u0631\u0631\u0633\u06cc \u0647\u0645\u0647 File Capability\u0647\u0627<\/h1>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo getcap -r \/ 2&gt;\/dev\/null\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0628\u0631\u0627\u06cc \u0645\u062d\u062f\u0648\u062f\u06a9\u0631\u062f\u0646 \u0628\u0647 \u0641\u0627\u06cc\u0644\u200c\u0633\u06cc\u0633\u062a\u0645 \u062c\u0627\u0631\u06cc:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo getcap -r \/usr \/usr\/local \/opt 2&gt;\/dev\/null\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">File Capability\u0647\u0627 \u0646\u06cc\u0632 \u0645\u0627\u0646\u0646\u062f SUID \u0628\u0627\u06cc\u062f \u062f\u0631 Baseline \u0627\u0645\u0646\u06cc\u062a\u06cc \u062b\u0628\u062a \u0648 \u062f\u0648\u0631\u0647\u200c\u0627\u06cc \u0628\u0631\u0631\u0633\u06cc \u0634\u0648\u0646\u062f.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">\u0627\u0646\u062a\u062e\u0627\u0628 \u0645\u06cc\u0627\u0646 SUID\u060c sudo \u0648 Capability<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">\u0631\u0627\u0647\u0646\u0645\u0627\u06cc \u06a9\u0644\u06cc:<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><thead><tr><th class=\"has-text-align-center\" data-align=\"center\">\u0646\u06cc\u0627\u0632<\/th><th class=\"has-text-align-center\" data-align=\"center\">\u06af\u0632\u06cc\u0646\u0647 \u0645\u0646\u0627\u0633\u0628\u200c\u062a\u0631<\/th><\/tr><\/thead><tbody><tr><td class=\"has-text-align-center\" data-align=\"center\">\u0627\u062c\u0631\u0627\u06cc \u06cc\u06a9 Command \u0645\u062f\u06cc\u0631\u06cc\u062a\u06cc \u0645\u0634\u062e\u0635<\/td><td class=\"has-text-align-center\" data-align=\"center\">sudoers<\/td><\/tr><tr><td class=\"has-text-align-center\" data-align=\"center\">\u0627\u062c\u0631\u0627\u06cc Job \u0632\u0645\u0627\u0646\u200c\u0628\u0646\u062f\u06cc\u200c\u0634\u062f\u0647 Privileged<\/td><td class=\"has-text-align-center\" data-align=\"center\">systemd service\/timer<\/td><\/tr><tr><td class=\"has-text-align-center\" data-align=\"center\">\u0646\u06cc\u0627\u0632 \u0628\u0631\u0646\u0627\u0645\u0647 \u0628\u0647 \u06cc\u06a9 Privilege \u0645\u062d\u062f\u0648\u062f Kernel<\/td><td class=\"has-text-align-center\" data-align=\"center\">File Capability<\/td><\/tr><tr><td class=\"has-text-align-center\" data-align=\"center\">\u0628\u0631\u0646\u0627\u0645\u0647 \u0633\u06cc\u0633\u062a\u0645\u06cc \u0637\u0631\u0627\u062d\u06cc\u200c\u0634\u062f\u0647 \u0628\u0631\u0627\u06cc Effective UID \u0645\u0627\u0644\u06a9<\/td><td class=\"has-text-align-center\" data-align=\"center\">SUID<\/td><\/tr><tr><td class=\"has-text-align-center\" data-align=\"center\">\u0645\u062f\u06cc\u0631\u06cc\u062a \u0633\u0631\u0648\u06cc\u0633 \u062a\u0648\u0633\u0637 \u06a9\u0627\u0631\u0628\u0631 \u0645\u0634\u062e\u0635<\/td><td class=\"has-text-align-center\" data-align=\"center\">sudo \u0628\u0627 Rule \u0645\u062d\u062f\u0648\u062f<\/td><\/tr><tr><td class=\"has-text-align-center\" data-align=\"center\">\u0627\u062c\u0631\u0627\u06cc Script \u0628\u0627 \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0627\u0644\u0627<\/td><td class=\"has-text-align-center\" data-align=\"center\">sudo \u06cc\u0627 systemd\u060c \u0646\u0647 Script SUID<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">\u0645\u0627\u0646\u06cc\u062a\u0648\u0631\u06cc\u0646\u06af \u0641\u0627\u06cc\u0644\u200c\u0647\u0627\u06cc SUID<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">\u0628\u0631\u0627\u06cc \u062b\u0628\u062a \u0641\u0647\u0631\u0633\u062a \u0647\u0645\u0631\u0627\u0647 \u0628\u0627 Hash:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo find \/ \\\n-xdev \\\n-type f \\\n-perm -4000 \\\n-print0 2&gt;\/dev\/null \\\n| sudo xargs -0 sha256sum \\\n&gt; \/root\/suid-hashes.txt\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0641\u0627\u06cc\u0644 \u0631\u0627 \u0645\u062d\u0627\u0641\u0638\u062a \u06a9\u0646\u06cc\u062f:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo chmod 600 \/root\/suid-hashes.txt\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0628\u0631\u0627\u06cc \u0628\u0631\u0631\u0633\u06cc \u062f\u0648\u0631\u0647\u200c\u0627\u06cc:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo find \/ \\\n-xdev \\\n-type f \\\n-perm -4000 \\\n-print0 2&gt;\/dev\/null \\\n| sudo xargs -0 sha256sum \\\n&gt; \/root\/suid-hashes-current.txt\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0645\u0642\u0627\u06cc\u0633\u0647:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>diff -u \\\n\/root\/suid-hashes.txt \\\n\/root\/suid-hashes-current.txt\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u062a\u063a\u06cc\u06cc\u0631 Package \u0631\u0633\u0645\u06cc \u067e\u0633 \u0627\u0632 Update \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f Hash \u0631\u0627 \u062a\u063a\u06cc\u06cc\u0631 \u062f\u0647\u062f\u061b \u0628\u0646\u0627\u0628\u0631\u0627\u06cc\u0646 \u0647\u0631 \u062a\u0641\u0627\u0648\u062a \u0628\u0627\u06cc\u062f \u0628\u0627 \u062a\u0627\u0631\u06cc\u062e\u0686\u0647 \u0628\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc Package\u0647\u0627 \u0645\u0642\u0627\u06cc\u0633\u0647 \u0634\u0648\u062f.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">\u0628\u0631\u0631\u0633\u06cc \u0641\u0627\u06cc\u0644\u200c\u0647\u0627\u06cc SUID \u062c\u062f\u06cc\u062f<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">\u0641\u0627\u06cc\u0644\u200c\u0647\u0627\u06cc SUID \u0627\u06cc\u062c\u0627\u062f\u0634\u062f\u0647 \u06cc\u0627 \u062a\u063a\u06cc\u06cc\u0631\u06a9\u0631\u062f\u0647 \u062f\u0631 \u0631\u0648\u0632\u0647\u0627\u06cc \u0627\u062e\u06cc\u0631:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo find \/ \\\n-xdev \\\n-type f \\\n-perm -4000 \\\n-mtime -7 \\\n-ls 2&gt;\/dev\/null\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0641\u0627\u06cc\u0644\u200c\u0647\u0627\u06cc \u062a\u063a\u06cc\u06cc\u0631\u06a9\u0631\u062f\u0647 \u062f\u0631 24 \u0633\u0627\u0639\u062a \u0627\u062e\u06cc\u0631:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo find \/ \\\n-xdev \\\n-type f \\\n-perm -4000 \\\n-mtime -1 \\\n-ls 2&gt;\/dev\/null\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0627\u06cc\u0646 \u0628\u0631\u0631\u0633\u06cc \u0628\u0647\u200c\u062a\u0646\u0647\u0627\u06cc\u06cc \u0646\u0634\u0627\u0646\u0647 \u0622\u0644\u0648\u062f\u06af\u06cc \u0646\u06cc\u0633\u062a\u061b \u0645\u0645\u06a9\u0646 \u0627\u0633\u062a Package Update \u0641\u0627\u06cc\u0644 \u0631\u0627 \u062a\u063a\u06cc\u06cc\u0631 \u062f\u0627\u062f\u0647 \u0628\u0627\u0634\u062f.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">\u0628\u0631\u0631\u0633\u06cc Log \u0646\u0635\u0628 Package\u0647\u0627<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">\u062f\u0631 Ubuntu:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>grep -iE 'install|upgrade' \\\n\/var\/log\/apt\/history.log\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u062f\u0631 AlmaLinux:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo dnf history\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0628\u0631\u0627\u06cc \u0628\u0631\u0631\u0633\u06cc \u062c\u0632\u0626\u06cc\u0627\u062a \u06cc\u06a9 Transaction:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo dnf history info TRANSACTION_ID\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0647\u062f\u0641 \u0627\u06cc\u0646 \u0627\u0633\u062a \u06a9\u0647 \u0645\u0634\u062e\u0635 \u0634\u0648\u062f \u062a\u063a\u06cc\u06cc\u0631 \u0641\u0627\u06cc\u0644 SUID \u0628\u0627 \u0646\u0635\u0628 \u06cc\u0627 \u0628\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u0645\u0639\u062a\u0628\u0631 \u0645\u0631\u062a\u0628\u0637 \u0628\u0648\u062f\u0647 \u0627\u0633\u062a \u06cc\u0627 \u062e\u06cc\u0631.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">\u062d\u0630\u0641 SUID \u063a\u06cc\u0631\u0636\u0631\u0648\u0631\u06cc<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">\u0642\u0628\u0644 \u0627\u0632 \u062d\u0630\u0641 SUID \u0628\u0631\u0631\u0633\u06cc \u06a9\u0646\u06cc\u062f:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>\u0641\u0627\u06cc\u0644 \u0645\u062a\u0639\u0644\u0642 \u0628\u0647 \u0686\u0647 Package \u0627\u0633\u062a\u061f<\/li>\n\n\n\n<li>\u0628\u0631\u0646\u0627\u0645\u0647 \u0628\u0631\u0627\u06cc \u0639\u0645\u0644\u06a9\u0631\u062f \u0635\u062d\u06cc\u062d \u0628\u0647 SUID \u0646\u06cc\u0627\u0632 \u062f\u0627\u0631\u062f\u061f<\/li>\n\n\n\n<li>\u0633\u0631\u0648\u06cc\u0633 \u06cc\u0627 Login \u0628\u0647 \u0622\u0646 \u0648\u0627\u0628\u0633\u062a\u0647 \u0627\u0633\u062a\u061f<\/li>\n\n\n\n<li>\u062c\u0627\u06cc\u06af\u0632\u06cc\u0646 sudo \u06cc\u0627 Capability \u0648\u062c\u0648\u062f \u062f\u0627\u0631\u062f\u061f<\/li>\n\n\n\n<li>Vendor \u0686\u0647 Permission\u06cc \u0631\u0627 \u062a\u0648\u0635\u06cc\u0647 \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a\u061f<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">\u0633\u067e\u0633:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo chmod u-s \/path\/to\/application\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0628\u0631\u0631\u0633\u06cc:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>stat -c '%a %A %U %G %n' \/path\/to\/application\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0628\u0639\u062f \u0627\u0632 \u062d\u0630\u0641\u060c \u0639\u0645\u0644\u06a9\u0631\u062f \u0628\u0631\u0646\u0627\u0645\u0647 \u0631\u0627 \u0622\u0632\u0645\u0627\u06cc\u0634 \u06a9\u0646\u06cc\u062f.<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p class=\"wp-block-paragraph\">\u062d\u0630\u0641 \u062a\u0635\u0627\u062f\u0641\u06cc SUID \u0627\u0632 \u0628\u0631\u0646\u0627\u0645\u0647\u200c\u0647\u0627\u06cc\u06cc \u0645\u0627\u0646\u0646\u062f <code>passwd<\/code> \u06cc\u0627 <code>sudo<\/code> \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0639\u0645\u0644\u06a9\u0631\u062f \u0645\u062f\u06cc\u0631\u06cc\u062a\u06cc \u0633\u06cc\u0633\u062a\u0645 \u0631\u0627 \u0645\u062e\u062a\u0644 \u06a9\u0646\u062f.<\/p>\n<\/blockquote>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">\u0628\u0627\u0632\u06cc\u0627\u0628\u06cc SUID \u0641\u0627\u06cc\u0644 Package<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">\u0627\u06af\u0631 Permission \u06cc\u06a9 \u0641\u0627\u06cc\u0644 Package \u0631\u0633\u0645\u06cc \u0627\u0634\u062a\u0628\u0627\u0647 \u0634\u062f\u0647 \u0627\u0633\u062a\u060c \u0627\u0628\u062a\u062f\u0627 Package \u0645\u0627\u0644\u06a9 \u0631\u0627 \u067e\u06cc\u062f\u0627 \u06a9\u0646\u06cc\u062f.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Ubuntu:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>dpkg -S \/usr\/bin\/passwd\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">AlmaLinux:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>rpm -qf \/usr\/bin\/passwd\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0633\u067e\u0633 Permission \u0645\u0648\u0631\u062f\u0627\u0646\u062a\u0638\u0627\u0631 \u0631\u0627 \u0627\u0632 Package \u0631\u0633\u0645\u06cc \u06cc\u0627 \u06cc\u06a9 \u0633\u06cc\u0633\u062a\u0645 \u0633\u0627\u0644\u0645 \u0647\u0645\u200c\u0646\u0633\u062e\u0647 \u0628\u0631\u0631\u0633\u06cc \u06a9\u0646\u06cc\u062f.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u0646\u0635\u0628 \u0645\u062c\u062f\u062f Package \u0646\u06cc\u0632 \u0645\u0645\u06a9\u0646 \u0627\u0633\u062a \u0641\u0627\u06cc\u0644 \u0648 Permission \u0622\u0646 \u0631\u0627 \u0628\u0627\u0632\u06cc\u0627\u0628\u06cc \u06a9\u0646\u062f.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Ubuntu:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo apt install --reinstall passwd\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">AlmaLinux:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo dnf reinstall passwd\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0642\u0628\u0644 \u0627\u0632 Reinstall\u060c \u0627\u062b\u0631 \u0622\u0646 \u0631\u0648\u06cc \u062a\u0646\u0638\u06cc\u0645\u0627\u062a \u0648 \u0633\u0631\u0648\u06cc\u0633\u200c\u0647\u0627 \u0631\u0627 \u0628\u0631\u0631\u0633\u06cc \u06a9\u0646\u06cc\u062f.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">\u0631\u0641\u0639 \u062e\u0637\u0627\u0647\u0627\u06cc \u0631\u0627\u06cc\u062c SUID<\/h1>\n\n\n\n<h2 class=\"wp-block-heading\">SUID \u0641\u0639\u0627\u0644 \u0627\u0633\u062a \u0627\u0645\u0627 Effective UID \u062a\u063a\u06cc\u06cc\u0631 \u0646\u0645\u06cc\u200c\u06a9\u0646\u062f<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Permission \u0631\u0627 \u0628\u0631\u0631\u0633\u06cc \u06a9\u0646\u06cc\u062f:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>stat -c '%a %A %U %G %n' application\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u062e\u0631\u0648\u062c\u06cc \u0628\u0627\u06cc\u062f \u0634\u0627\u0645\u0644 SUID \u0628\u0627\u0634\u062f:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>4755 -rwsr-xr-x root root application\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0633\u067e\u0633 Mount Option \u0631\u0627 \u0628\u0631\u0631\u0633\u06cc \u06a9\u0646\u06cc\u062f:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>findmnt -T application \\\n-o TARGET,FSTYPE,OPTIONS\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u062f\u0644\u0627\u06cc\u0644 \u0627\u062d\u062a\u0645\u0627\u0644\u06cc:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>Filesystem mounted with nosuid\nno_new_privs is enabled\nProgram is an interpreter script\nProcess is being traced\nSELinux policy denies execution\nContainer security settings block privilege gain\nFile owner is not the expected user\n<\/code><\/pre>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\">\u0641\u0627\u06cc\u0644 \u0628\u0627 s \u0628\u0632\u0631\u06af \u0646\u0645\u0627\u06cc\u0634 \u062f\u0627\u062f\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\u0646\u0645\u0648\u0646\u0647:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>-rwSr-xr-x\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0645\u0627\u0644\u06a9 \u0641\u0627\u06cc\u0644 Execute \u0646\u062f\u0627\u0631\u062f.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u0627\u0635\u0644\u0627\u062d:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo chmod u+x application\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u06cc\u0627 \u062d\u0630\u0641 SUID:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo chmod u-s application\n<\/code><\/pre>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\">chmod u+s \u062e\u0637\u0627\u06cc Operation not permitted \u0645\u06cc\u200c\u062f\u0647\u062f<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\u0646\u0645\u0648\u0646\u0647:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>chmod: changing permissions of 'application': Operation not permitted\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u062f\u0644\u0627\u06cc\u0644 \u0627\u062d\u062a\u0645\u0627\u0644\u06cc:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>\u06a9\u0627\u0631\u0628\u0631 \u0645\u0627\u0644\u06a9 \u0641\u0627\u06cc\u0644 \u0646\u06cc\u0633\u062a.<\/li>\n\n\n\n<li>\u062f\u0633\u062a\u0631\u0633\u06cc root \u0648\u062c\u0648\u062f \u0646\u062f\u0627\u0631\u062f.<\/li>\n\n\n\n<li>\u0641\u0627\u06cc\u0644\u200c\u0633\u06cc\u0633\u062a\u0645 Read-only \u0627\u0633\u062a.<\/li>\n\n\n\n<li>\u0641\u0627\u06cc\u0644 Immutable \u0627\u0633\u062a.<\/li>\n\n\n\n<li>\u0641\u0627\u06cc\u0644 \u0631\u0648\u06cc NFS \u06cc\u0627 CIFS \u0642\u0631\u0627\u0631 \u062f\u0627\u0631\u062f.<\/li>\n\n\n\n<li>Container Capability \u0644\u0627\u0632\u0645 \u0631\u0627 \u0646\u062f\u0627\u0631\u062f.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">\u0628\u0627 sudo \u0622\u0632\u0645\u0627\u06cc\u0634 \u06a9\u0646\u06cc\u062f:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo chmod u+s application\n<\/code><\/pre>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\">\u0628\u0631\u0631\u0633\u06cc Read-only \u0628\u0648\u062f\u0646 \u0641\u0627\u06cc\u0644\u200c\u0633\u06cc\u0633\u062a\u0645<\/h2>\n\n\n\n<pre class=\"wp-block-code\"><code>findmnt -T application \\\n-o TARGET,FSTYPE,OPTIONS\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0648\u062c\u0648\u062f \u06af\u0632\u06cc\u0646\u0647 \u0632\u06cc\u0631:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>ro\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0646\u0634\u0627\u0646\u200c\u062f\u0647\u0646\u062f\u0647 Read-only \u0628\u0648\u062f\u0646 Mount \u0627\u0633\u062a.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\">\u0628\u0631\u0631\u0633\u06cc Immutable Attribute<\/h2>\n\n\n\n<pre class=\"wp-block-code\"><code>lsattr application\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0646\u0645\u0648\u0646\u0647:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>----i----------------- application\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0628\u0631\u0627\u06cc \u062d\u0630\u0641 \u0645\u0648\u0642\u062a:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo chattr -i application\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u067e\u0633 \u0627\u0632 \u062a\u063a\u06cc\u06cc\u0631 \u062f\u0631 \u0635\u0648\u0631\u062a \u0646\u06cc\u0627\u0632:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo chattr +i application\n<\/code><\/pre>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\">\u0641\u0627\u06cc\u0644 SUID \u0627\u062c\u0631\u0627 \u0646\u0645\u06cc\u200c\u0634\u0648\u062f<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\u0645\u0648\u0627\u0631\u062f \u0632\u06cc\u0631 \u0631\u0627 \u0628\u0631\u0631\u0633\u06cc \u06a9\u0646\u06cc\u062f:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>file application\nldd application\nnamei -l application\nfindmnt -T application -o TARGET,FSTYPE,OPTIONS\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u062f\u0644\u0627\u06cc\u0644 \u0627\u062d\u062a\u0645\u0627\u0644\u06cc:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>Missing execute permission\nFilesystem mounted noexec\nMissing dynamic linker or library\nWrong architecture\nSELinux or AppArmor denial\nCorrupted binary\nInvalid interpreter\n<\/code><\/pre>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\">\u062e\u0637\u0627\u06cc Permission denied<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Permission:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>ls -l application\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u067e\u0648\u0634\u0647\u200c\u0647\u0627\u06cc \u0648\u0627\u0644\u062f:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>namei -l application\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Mount Option:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>findmnt -T application \\\n-o TARGET,FSTYPE,OPTIONS\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">SELinux:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>getenforce\nsudo ausearch -m AVC -ts recent\n<\/code><\/pre>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\">SUID \u0628\u0639\u062f \u0627\u0632 chown \u0646\u0627\u067e\u062f\u06cc\u062f \u0634\u062f\u0647 \u0627\u0633\u062a<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\u0627\u06cc\u0646 \u0631\u0641\u062a\u0627\u0631 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0637\u0628\u06cc\u0639\u06cc \u0628\u0627\u0634\u062f\u061b \u062a\u063a\u06cc\u06cc\u0631 \u0645\u0627\u0644\u06a9\u06cc\u062a \u0645\u0645\u06a9\u0646 \u0627\u0633\u062a Bit\u0647\u0627\u06cc SUID \u06cc\u0627 SGID \u0631\u0627 \u067e\u0627\u06a9 \u06a9\u0646\u062f.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u0628\u0631\u0631\u0633\u06cc:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>stat -c '%a %A %U %G %n' application\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0641\u0642\u0637 \u0627\u06af\u0631 \u0628\u0631\u0646\u0627\u0645\u0647 \u0648\u0627\u0642\u0639\u0627\u064b \u0628\u0647 SUID \u0646\u06cc\u0627\u0632 \u062f\u0627\u0631\u062f \u0648 \u0627\u0645\u0646\u06cc\u062a \u0622\u0646 \u062a\u0623\u06cc\u06cc\u062f \u0634\u062f\u0647 \u0627\u0633\u062a\u060c \u062f\u0648\u0628\u0627\u0631\u0647 \u0641\u0639\u0627\u0644 \u06a9\u0646\u06cc\u062f:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo chmod u+s application\n<\/code><\/pre>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\">SUID \u0631\u0648\u06cc Script \u06a9\u0627\u0631 \u0646\u0645\u06cc\u200c\u06a9\u0646\u062f<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Linux SUID \u0631\u0648\u06cc Interpreter Script\u0647\u0627 \u0631\u0627 \u0646\u0627\u062f\u06cc\u062f\u0647 \u0645\u06cc\u200c\u06af\u06cc\u0631\u062f.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u0631\u0648\u0634\u200c\u0647\u0627\u06cc \u062c\u0627\u06cc\u06af\u0632\u06cc\u0646:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>Restricted sudoers rule\nCompiled and audited helper\nsystemd service\nLinux file capability\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0627\u0632 \u0633\u0627\u062e\u062a Wrapper \u0646\u0627\u0627\u0645\u0646 \u06cc\u0627 SUID Shell \u0628\u0631\u0627\u06cc \u062f\u0648\u0631\u0632\u062f\u0646 \u0627\u06cc\u0646 \u0645\u062d\u062f\u0648\u062f\u06cc\u062a \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0646\u06a9\u0646\u06cc\u062f.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">\u0646\u06a9\u0627\u062a \u0627\u0645\u0646\u06cc\u062a\u06cc \u0648 \u0628\u0647\u062a\u0631\u06cc\u0646 \u0631\u0648\u0634\u200c\u0647\u0627<\/h1>\n\n\n\n<ul class=\"wp-block-list\">\n<li>\u0641\u0642\u0637 \u0641\u0627\u06cc\u0644\u200c\u0647\u0627\u06cc \u0627\u062c\u0631\u0627\u06cc\u06cc \u0642\u0627\u0628\u0644\u200c\u0627\u0639\u062a\u0645\u0627\u062f \u0628\u0627\u06cc\u062f SUID \u062f\u0627\u0634\u062a\u0647 \u0628\u0627\u0634\u0646\u062f.<\/li>\n\n\n\n<li>\u0641\u0627\u06cc\u0644 SUID root \u0646\u0628\u0627\u06cc\u062f \u062a\u0648\u0633\u0637 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0645\u0639\u0645\u0648\u0644\u06cc \u0642\u0627\u0628\u0644\u200c\u0646\u0648\u0634\u062a\u0646 \u0628\u0627\u0634\u062f.<\/li>\n\n\n\n<li>\u067e\u0648\u0634\u0647\u200c\u0647\u0627\u06cc \u0648\u0627\u0644\u062f \u0641\u0627\u06cc\u0644 SUID \u0646\u0628\u0627\u06cc\u062f \u0642\u0627\u0628\u0644\u200c\u0646\u0648\u0634\u062a\u0646 \u0628\u0627\u0634\u0646\u062f.<\/li>\n\n\n\n<li>\u0641\u0627\u06cc\u0644\u200c\u0647\u0627\u06cc SUID \u0631\u0627 \u0628\u0647\u200c\u0635\u0648\u0631\u062a \u062f\u0648\u0631\u0647\u200c\u0627\u06cc \u0641\u0647\u0631\u0633\u062a \u06a9\u0646\u06cc\u062f.<\/li>\n\n\n\n<li>\u0627\u0632 \u0641\u0627\u06cc\u0644\u200c\u0647\u0627\u06cc SUID Baseline \u0648 Hash \u062a\u0647\u06cc\u0647 \u06a9\u0646\u06cc\u062f.<\/li>\n\n\n\n<li>\u0641\u0627\u06cc\u0644\u200c\u0647\u0627\u06cc \u062c\u062f\u06cc\u062f \u062f\u0631 <code>\/tmp<\/code>\u060c <code>\/var\/tmp<\/code>\u060c <code>\/opt<\/code> \u0648 <code>\/usr\/local<\/code> \u0631\u0627 \u0628\u0631\u0631\u0633\u06cc \u06a9\u0646\u06cc\u062f.<\/li>\n\n\n\n<li>Package \u0645\u0627\u0644\u06a9 \u0647\u0631 \u0641\u0627\u06cc\u0644 SUID \u0631\u0627 \u0645\u0634\u062e\u0635 \u06a9\u0646\u06cc\u062f.<\/li>\n\n\n\n<li>\u0627\u0632 SUID \u0631\u0648\u06cc Shell\u060c Interpreter \u0648 \u0627\u0628\u0632\u0627\u0631\u0647\u0627\u06cc \u062a\u0639\u0627\u0645\u0644\u06cc \u062e\u0648\u062f\u062f\u0627\u0631\u06cc \u06a9\u0646\u06cc\u062f.<\/li>\n\n\n\n<li>\u0627\u0632 SUID \u0631\u0648\u06cc Script\u0647\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0646\u06a9\u0646\u06cc\u062f.<\/li>\n\n\n\n<li>\u0628\u0631\u0627\u06cc Command\u0647\u0627\u06cc \u0645\u062f\u06cc\u0631\u06cc\u062a\u06cc \u0645\u0634\u062e\u0635 \u0627\u0632 sudoers \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0646\u06cc\u062f.<\/li>\n\n\n\n<li>\u0628\u0631\u0627\u06cc Privilege \u0645\u062d\u062f\u0648\u062f \u0627\u0632 Linux Capabilities \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0646\u06cc\u062f.<\/li>\n\n\n\n<li>\u0631\u0648\u06cc Mount\u0647\u0627\u06cc \u063a\u06cc\u0631\u0642\u0627\u0628\u0644\u200c\u0627\u0639\u062a\u0645\u0627\u062f \u06af\u0632\u06cc\u0646\u0647 <code>nosuid<\/code> \u0631\u0627 \u062f\u0631 \u0646\u0638\u0631 \u0628\u06af\u06cc\u0631\u06cc\u062f.<\/li>\n\n\n\n<li>SELinux \u0648 AppArmor \u0631\u0627 \u0641\u0639\u0627\u0644 \u0648 \u062f\u0631\u0633\u062a \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc \u06a9\u0646\u06cc\u062f.<\/li>\n\n\n\n<li>\u0628\u0631\u0646\u0627\u0645\u0647 Privileged \u0628\u0627\u06cc\u062f \u0648\u0631\u0648\u062f\u06cc\u200c\u0647\u0627 \u0648 Environment \u0631\u0627 \u067e\u0627\u06a9\u200c\u0633\u0627\u0632\u06cc \u06a9\u0646\u062f.<\/li>\n\n\n\n<li>Privilege \u0627\u0636\u0627\u0641\u06cc \u0628\u0627\u06cc\u062f \u062f\u0631 \u0627\u0648\u0644\u06cc\u0646 \u0641\u0631\u0635\u062a Drop \u0634\u0648\u062f.<\/li>\n\n\n\n<li>\u0628\u0639\u062f \u0627\u0632 <code>chown<\/code> \u0648 Package Update\u060c Permission\u0647\u0627 \u0631\u0627 \u062f\u0648\u0628\u0627\u0631\u0647 \u0628\u0631\u0631\u0633\u06cc \u06a9\u0646\u06cc\u062f.<\/li>\n\n\n\n<li>SUID \u0631\u0627 \u0628\u062f\u0648\u0646 \u0628\u0631\u0631\u0633\u06cc \u0627\u0632 \u0641\u0627\u06cc\u0644 \u0633\u06cc\u0633\u062a\u0645\u06cc \u062d\u0630\u0641 \u0646\u06a9\u0646\u06cc\u062f.<\/li>\n\n\n\n<li>\u0647\u0631 \u0641\u0627\u06cc\u0644 SUID \u0646\u0627\u0634\u0646\u0627\u062e\u062a\u0647 \u0631\u0627 \u0628\u0647\u200c\u0639\u0646\u0648\u0627\u0646 \u0645\u0648\u0631\u062f \u0627\u0645\u0646\u06cc\u062a\u06cc \u0628\u0631\u0631\u0633\u06cc \u06a9\u0646\u06cc\u062f.<\/li>\n<\/ul>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">\u0627\u0634\u062a\u0628\u0627\u0647\u0627\u062a \u0631\u0627\u06cc\u062c<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">\u0645\u0648\u0627\u0631\u062f \u0632\u06cc\u0631 \u0627\u0632 \u0627\u0634\u062a\u0628\u0627\u0647\u0627\u062a \u0645\u062a\u062f\u0627\u0648\u0644 \u0647\u0646\u06af\u0627\u0645 \u06a9\u0627\u0631 \u0628\u0627 SUID \u0647\u0633\u062a\u0646\u062f:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>\u0641\u0639\u0627\u0644\u200c\u06a9\u0631\u062f\u0646 SUID \u0631\u0648\u06cc Shell<\/li>\n\n\n\n<li>\u0641\u0639\u0627\u0644\u200c\u06a9\u0631\u062f\u0646 SUID \u0631\u0648\u06cc Script \u0648 \u0627\u0646\u062a\u0638\u0627\u0631 \u0627\u062c\u0631\u0627\u06cc root<\/li>\n\n\n\n<li>\u062f\u0627\u062f\u0646 Permission \u0646\u0648\u0634\u062a\u0646 \u0628\u0647 \u0641\u0627\u06cc\u0644 SUID<\/li>\n\n\n\n<li>\u0642\u0631\u0627\u0631\u062f\u0627\u062f\u0646 Binary SUID \u062f\u0631 \u067e\u0648\u0634\u0647 \u0642\u0627\u0628\u0644\u200c\u0646\u0648\u0634\u062a\u0646<\/li>\n\n\n\n<li>\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 <code>4777<\/code><\/li>\n\n\n\n<li>\u0646\u0627\u062f\u06cc\u062f\u0647\u200c\u06af\u0631\u0641\u062a\u0646 <code>nosuid<\/code><\/li>\n\n\n\n<li>\u0646\u0627\u062f\u06cc\u062f\u0647\u200c\u06af\u0631\u0641\u062a\u0646 <code>no_new_privs<\/code><\/li>\n\n\n\n<li>\u062a\u0635\u0648\u0631 \u0627\u06cc\u0646\u06a9\u0647 SUID \u0647\u0645\u06cc\u0634\u0647 Shell root \u0627\u06cc\u062c\u0627\u062f \u0645\u06cc\u200c\u06a9\u0646\u062f<\/li>\n\n\n\n<li>\u062d\u0630\u0641 SUID \u0641\u0627\u06cc\u0644 \u0633\u06cc\u0633\u062a\u0645\u06cc \u0628\u062f\u0648\u0646 \u0628\u0631\u0631\u0633\u06cc<\/li>\n\n\n\n<li>\u0641\u0639\u0627\u0644\u200c\u06a9\u0631\u062f\u0646 SUID \u0631\u0648\u06cc \u0628\u0631\u0646\u0627\u0645\u0647 \u062f\u0627\u0631\u0627\u06cc \u0648\u0631\u0648\u062f\u06cc \u06a9\u0646\u062a\u0631\u0644\u200c\u0646\u0634\u062f\u0647<\/li>\n\n\n\n<li>\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 Command\u0647\u0627\u06cc \u0646\u0633\u0628\u06cc \u062f\u0627\u062e\u0644 \u0628\u0631\u0646\u0627\u0645\u0647 Privileged<\/li>\n\n\n\n<li>\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0646\u0627\u0627\u0645\u0646 \u0627\u0632 <code>system()<\/code> \u06cc\u0627 Shell<\/li>\n\n\n\n<li>\u0628\u0631\u0631\u0633\u06cc\u200c\u0646\u06a9\u0631\u062f\u0646 SELinux \u0648 AppArmor<\/li>\n\n\n\n<li>\u0646\u062f\u0627\u0634\u062a\u0646 Baseline \u0627\u0632 \u0641\u0627\u06cc\u0644\u200c\u0647\u0627\u06cc SUID<\/li>\n\n\n\n<li>\u0646\u0627\u062f\u06cc\u062f\u0647\u200c\u06af\u0631\u0641\u062a\u0646 File Capability\u0647\u0627<\/li>\n\n\n\n<li>\u0628\u0631\u0631\u0633\u06cc\u200c\u0646\u06a9\u0631\u062f\u0646 \u0641\u0627\u06cc\u0644 \u0628\u0639\u062f \u0627\u0632 <code>chown<\/code><\/li>\n\n\n\n<li>\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 SUID \u0628\u0647\u200c\u062c\u0627\u06cc sudoers \u0645\u062d\u062f\u0648\u062f<\/li>\n<\/ul>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">\u0686\u06a9\u200c\u0644\u06cc\u0633\u062a \u0646\u0647\u0627\u06cc\u06cc SUID<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">\u067e\u0633 \u0627\u0632 \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u06cc\u0627 \u062a\u0646\u0638\u06cc\u0645 SUID\u060c \u0645\u0648\u0627\u0631\u062f \u0632\u06cc\u0631 \u0631\u0627 \u0628\u0631\u0631\u0633\u06cc \u06a9\u0646\u06cc\u062f:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>\u0641\u0627\u06cc\u0644 Regular Executable \u0627\u0633\u062a.<\/li>\n\n\n\n<li>\u0645\u0627\u0644\u06a9 \u0641\u0627\u06cc\u0644 \u0635\u062d\u06cc\u062d \u0627\u0633\u062a.<\/li>\n\n\n\n<li>\u06af\u0631\u0648\u0647 \u0641\u0627\u06cc\u0644 \u0635\u062d\u06cc\u062d \u0627\u0633\u062a.<\/li>\n\n\n\n<li>Permission \u0641\u0627\u06cc\u0644 \u0634\u0627\u0645\u0644 Write \u0628\u0631\u0627\u06cc \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u063a\u06cc\u0631\u0645\u062c\u0627\u0632 \u0646\u06cc\u0633\u062a.<\/li>\n\n\n\n<li>\u067e\u0648\u0634\u0647\u200c\u0647\u0627\u06cc \u0648\u0627\u0644\u062f \u0627\u0645\u0646 \u0647\u0633\u062a\u0646\u062f.<\/li>\n\n\n\n<li>\u0641\u0627\u06cc\u0644 \u0645\u062a\u0639\u0644\u0642 \u0628\u0647 Package \u0645\u0639\u062a\u0628\u0631 \u0627\u0633\u062a.<\/li>\n\n\n\n<li>Hash \u06cc\u0627 Package Verification \u0628\u0631\u0631\u0633\u06cc \u0634\u062f\u0647 \u0627\u0633\u062a.<\/li>\n\n\n\n<li>SUID \u0628\u0631\u0627\u06cc \u0639\u0645\u0644\u06a9\u0631\u062f \u0628\u0631\u0646\u0627\u0645\u0647 \u0648\u0627\u0642\u0639\u0627\u064b \u0644\u0627\u0632\u0645 \u0627\u0633\u062a.<\/li>\n\n\n\n<li>\u062c\u0627\u06cc\u06af\u0632\u06cc\u0646 sudo \u06cc\u0627 Capability \u0628\u0631\u0631\u0633\u06cc \u0634\u062f\u0647 \u0627\u0633\u062a.<\/li>\n\n\n\n<li>\u0641\u0627\u06cc\u0644\u200c\u0633\u06cc\u0633\u062a\u0645 \u0628\u0627 <code>nosuid<\/code> Mount \u0646\u0634\u062f\u0647 \u0627\u0633\u062a.<\/li>\n\n\n\n<li>\u0641\u0627\u06cc\u0644\u200c\u0633\u06cc\u0633\u062a\u0645 \u0628\u0627 <code>noexec<\/code> Mount \u0646\u0634\u062f\u0647 \u0627\u0633\u062a.<\/li>\n\n\n\n<li><code>no_new_privs<\/code> \u0645\u0627\u0646\u0639 \u0627\u062c\u0631\u0627 \u0646\u06cc\u0633\u062a.<\/li>\n\n\n\n<li>SELinux \u06cc\u0627 AppArmor \u0628\u0631\u0631\u0633\u06cc \u0634\u062f\u0647 \u0627\u0633\u062a.<\/li>\n\n\n\n<li>\u0641\u0627\u06cc\u0644 Script \u0646\u06cc\u0633\u062a.<\/li>\n\n\n\n<li>\u0628\u0631\u0646\u0627\u0645\u0647 Shell Escape \u0646\u062f\u0627\u0631\u062f.<\/li>\n\n\n\n<li>Environment \u0648 PATH \u0627\u0645\u0646 \u0647\u0633\u062a\u0646\u062f.<\/li>\n\n\n\n<li>\u0628\u0631\u0646\u0627\u0645\u0647 \u0648\u0631\u0648\u062f\u06cc \u06a9\u0627\u0631\u0628\u0631 \u0631\u0627 \u0627\u0639\u062a\u0628\u0627\u0631\u0633\u0646\u062c\u06cc \u0645\u06cc\u200c\u06a9\u0646\u062f.<\/li>\n\n\n\n<li>\u062a\u063a\u06cc\u06cc\u0631\u0627\u062a \u062f\u0631 Baseline \u062b\u0628\u062a \u0634\u062f\u0647\u200c\u0627\u0646\u062f.<\/li>\n\n\n\n<li>\u0639\u0645\u0644\u06a9\u0631\u062f \u0628\u0631\u0646\u0627\u0645\u0647 \u0628\u0627 \u06a9\u0627\u0631\u0628\u0631 \u0645\u062d\u062f\u0648\u062f \u0622\u0632\u0645\u0627\u06cc\u0634 \u0634\u062f\u0647 \u0627\u0633\u062a.<\/li>\n<\/ul>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">\u062f\u0633\u062a\u0648\u0631\u0627\u062a \u067e\u0631\u06a9\u0627\u0631\u0628\u0631\u062f SUID<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">\u0646\u0645\u0627\u06cc\u0634 Permission:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>ls -l application\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0646\u0645\u0627\u06cc\u0634 \u0639\u062f\u062f\u06cc:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>stat -c '%a %A %U %G %n' application\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0641\u0639\u0627\u0644\u200c\u06a9\u0631\u062f\u0646 SUID:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo chmod u+s application\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0641\u0639\u0627\u0644\u200c\u06a9\u0631\u062f\u0646 \u0639\u062f\u062f\u06cc:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo chmod 4755 application\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u062d\u0630\u0641 SUID:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo chmod u-s application\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u067e\u06cc\u062f\u0627\u06a9\u0631\u062f\u0646 \u0641\u0627\u06cc\u0644\u200c\u0647\u0627\u06cc SUID:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo find \/ \\\n-xdev \\\n-type f \\\n-perm -4000 \\\n-ls 2&gt;\/dev\/null\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u067e\u06cc\u062f\u0627\u06a9\u0631\u062f\u0646 SUID \u0648 SGID:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo find \/ \\\n-xdev \\\n-type f \\\n-perm \/6000 \\\n-ls 2&gt;\/dev\/null\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0628\u0631\u0631\u0633\u06cc Mount Option:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>findmnt -T application \\\n-o TARGET,FSTYPE,OPTIONS\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0628\u0631\u0631\u0633\u06cc Package \u062f\u0631 Ubuntu:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>dpkg -S \/path\/to\/application\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0628\u0631\u0631\u0633\u06cc Package \u062f\u0631 AlmaLinux:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>rpm -qf \/path\/to\/application\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0628\u0631\u0631\u0633\u06cc Capability:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>getcap application\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0628\u0631\u0631\u0633\u06cc SELinux:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>ls -Z application\n<\/code><\/pre>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">\u062c\u0645\u0639\u200c\u0628\u0646\u062f\u06cc<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">SUID \u06cc\u06a9\u06cc \u0627\u0632 Permission\u0647\u0627\u06cc \u0648\u06cc\u0698\u0647 \u0644\u06cc\u0646\u0648\u06a9\u0633 \u0627\u0633\u062a \u06a9\u0647 \u0628\u0627\u0639\u062b \u0645\u06cc\u200c\u0634\u0648\u062f \u06cc\u06a9 \u0641\u0627\u06cc\u0644 \u0627\u062c\u0631\u0627\u06cc\u06cc \u0628\u0627 Effective UID \u0645\u0627\u0644\u06a9 \u0641\u0627\u06cc\u0644 \u0627\u062c\u0631\u0627 \u0634\u0648\u062f.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u0628\u0631\u0627\u06cc \u0645\u062b\u0627\u0644:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>File owner: root\nExecuting user: ali\n\nReal UID: ali\nEffective UID: root\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">SUID \u0628\u0627 \u062d\u0631\u0641 <code>s<\/code> \u062f\u0631 \u0645\u062d\u0644 Execute \u0645\u0627\u0644\u06a9 \u0646\u0645\u0627\u06cc\u0634 \u062f\u0627\u062f\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>-rwsr-xr-x\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0648 \u0645\u0642\u062f\u0627\u0631 \u0639\u062f\u062f\u06cc \u0622\u0646 \u0645\u0639\u0645\u0648\u0644\u0627\u064b \u0628\u0627 \u0631\u0642\u0645 <code>4<\/code> \u0622\u063a\u0627\u0632 \u0645\u06cc\u200c\u0634\u0648\u062f:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>4755\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0628\u0631\u0627\u06cc \u0641\u0639\u0627\u0644\u200c\u0633\u0627\u0632\u06cc:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>chmod u+s application\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0628\u0631\u0627\u06cc \u062d\u0630\u0641:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>chmod u-s application\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">SUID \u0641\u0642\u0637 \u0631\u0648\u06cc \u0628\u0631\u0646\u0627\u0645\u0647\u200c\u0647\u0627\u06cc \u0627\u062c\u0631\u0627\u06cc\u06cc \u0637\u0631\u0627\u062d\u06cc\u200c\u0634\u062f\u0647 \u0648 \u0628\u0631\u0631\u0633\u06cc\u200c\u0634\u062f\u0647 \u0628\u0627\u06cc\u062f \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0634\u0648\u062f. Linux \u0622\u0646 \u0631\u0627 \u0631\u0648\u06cc Interpreter Script\u0647\u0627 \u0646\u0627\u062f\u06cc\u062f\u0647 \u0645\u06cc\u200c\u06af\u06cc\u0631\u062f \u0648 \u0631\u0648\u06cc \u0641\u0627\u06cc\u0644\u200c\u0633\u06cc\u0633\u062a\u0645\u200c\u0647\u0627\u06cc \u062f\u0627\u0631\u0627\u06cc \u06af\u0632\u06cc\u0646\u0647 <code>nosuid<\/code> \u0646\u06cc\u0632 \u0627\u0639\u0645\u0627\u0644 \u0646\u0645\u06cc\u200c\u06a9\u0646\u062f.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u0627\u0632 \u0622\u0646\u062c\u0627 \u06a9\u0647 \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 \u0628\u0631\u0646\u0627\u0645\u0647 SUID root \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u062f\u0633\u062a\u0631\u0633\u06cc \u06af\u0633\u062a\u0631\u062f\u0647\u200c\u0627\u06cc \u0627\u06cc\u062c\u0627\u062f \u06a9\u0646\u062f\u060c \u062f\u0631 \u0628\u0633\u06cc\u0627\u0631\u06cc \u0627\u0632 \u0633\u0646\u0627\u0631\u06cc\u0648\u0647\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 sudoers \u0645\u062d\u062f\u0648\u062f\u060c systemd \u06cc\u0627 Linux Capabilities \u0627\u0646\u062a\u062e\u0627\u0628 \u0627\u0645\u0646\u200c\u062a\u0631 \u0648 \u0642\u0627\u0628\u0644\u200c\u06a9\u0646\u062a\u0631\u0644\u200c\u062a\u0631\u06cc \u0627\u0633\u062a.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u0645\u0642\u062f\u0645\u0647 \u062f\u0631 \u0644\u06cc\u0646\u0648\u06a9\u0633\u060c \u0628\u0631\u0646\u0627\u0645\u0647\u200c\u0647\u0627 \u0645\u0639\u0645\u0648\u0644\u0627\u064b \u0628\u0627 \u0633\u0637\u062d \u062f\u0633\u062a\u0631\u0633\u06cc \u06a9\u0627\u0631\u0628\u0631\u06cc \u0627\u062c\u0631\u0627 \u0645\u06cc\u200c\u0634\u0648\u0646\u062f \u06a9\u0647 \u0622\u0646\u200c\u0647\u0627 \u0631\u0627 \u0641\u0631\u0627\u062e\u0648\u0627\u0646\u06cc \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a. \u0628\u0631\u0627\u06cc \u0645\u062b\u0627\u0644\u060c \u0627\u06af\u0631 \u06a9\u0627\u0631\u0628\u0631 ali \u06cc\u06a9 \u0628\u0631\u0646\u0627\u0645\u0647 \u0631\u0627 \u0627\u062c\u0631\u0627 \u06a9\u0646\u062f\u060c \u0622\u0646 \u0628\u0631\u0646\u0627\u0645\u0647 \u0646\u06cc\u0632 \u0645\u0639\u0645\u0648\u0644\u0627\u064b \u0628\u0627 \u062f\u0633\u062a\u0631\u0633\u06cc\u200c\u0647\u0627\u06cc \u06a9\u0627\u0631\u0628\u0631 ali \u0641\u0639\u0627\u0644\u06cc\u062a \u062e\u0648\u0627\u0647\u062f \u06a9\u0631\u062f. \u0627\u0645\u0627 \u0628\u0639\u0636\u06cc \u0628\u0631\u0646\u0627\u0645\u0647\u200c\u0647\u0627 \u0628\u0631\u0627\u06cc \u0627\u0646\u062c\u0627\u0645 \u0648\u0638\u06cc\u0641\u0647 \u062e\u0648\u062f \u0628\u0647 \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0627\u0644\u0627\u062a\u0631\u06cc \u0646\u06cc\u0627\u0632 \u062f\u0627\u0631\u0646\u062f. \u0628\u0631\u0627\u06cc \u0646\u0645\u0648\u0646\u0647\u060c \u062f\u0633\u062a\u0648\u0631 passwd \u0628\u0627\u06cc\u062f [&hellip;]<\/p>\n","protected":false},"author":4,"featured_media":19589,"parent":17706,"menu_order":24,"comment_status":"open","ping_status":"closed","template":"","doc_tag":[],"class_list":["post-17836","docs","type-docs","status-publish","has-post-thumbnail","hentry"],"acf":[],"author_avatar":"https:\/\/maralhost.com\/kb\/wp-content\/litespeed\/avatar\/86d527e9d6c721b378b27e18daa8865e.jpg?ver=1786429443","author_name":"Fateme Moayed","_links":{"self":[{"href":"https:\/\/maralhost.com\/kb\/wp-json\/wp\/v2\/docs\/17836","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/maralhost.com\/kb\/wp-json\/wp\/v2\/docs"}],"about":[{"href":"https:\/\/maralhost.com\/kb\/wp-json\/wp\/v2\/types\/docs"}],"author":[{"embeddable":true,"href":"https:\/\/maralhost.com\/kb\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/maralhost.com\/kb\/wp-json\/wp\/v2\/comments?post=17836"}],"version-history":[{"count":3,"href":"https:\/\/maralhost.com\/kb\/wp-json\/wp\/v2\/docs\/17836\/revisions"}],"predecessor-version":[{"id":19663,"href":"https:\/\/maralhost.com\/kb\/wp-json\/wp\/v2\/docs\/17836\/revisions\/19663"}],"up":[{"embeddable":true,"href":"https:\/\/maralhost.com\/kb\/wp-json\/wp\/v2\/docs\/17706"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/maralhost.com\/kb\/wp-json\/wp\/v2\/media\/19589"}],"wp:attachment":[{"href":"https:\/\/maralhost.com\/kb\/wp-json\/wp\/v2\/media?parent=17836"}],"wp:term":[{"taxonomy":"doc_tag","embeddable":true,"href":"https:\/\/maralhost.com\/kb\/wp-json\/wp\/v2\/doc_tag?post=17836"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}