Skip to content

Commit 3f44e94

Browse files
author
Vladimir Kotal
committed
fix wording
1 parent 95cbe0a commit 3f44e94

File tree

1 file changed

+7
-7
lines changed

1 file changed

+7
-7
lines changed

user-access.tex

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -343,10 +343,10 @@
343343
\item \label{SUID_BIT} The SUID and SGID bits are used for programs that need
344344
bigger privileges than the user who executes them. One example is the
345345
\texttt{passwd} program that needs to update files \texttt{/etc/passwd} and
346-
\texttt{/etc/shadow}, where the ordinary user cannot modify the first and
347-
cannot write into the the second. Another example is the \texttt{su} program,
348-
which has to have the right to arbitrarily change user and group identity,
349-
which is a privilege of programs running with UID~0.
346+
\texttt{/etc/shadow}, where the ordinary (i.e. non root) user process cannot
347+
modify the first and cannot write into the the second. Another example is the
348+
\texttt{su} program, which has to have the right to arbitrarily change user and
349+
group identity, which is a privilege of programs running with UID~0.
350350
\item Programs using the SUID and SGID bits should be carefully programmed
351351
to allow only the operations for which they were designed and prevent misuse
352352
of their privileges for non-authorized actions (root shell execution).
@@ -357,8 +357,8 @@
357357
(i.e. secure) SUID/SGID program, especially of higher complexity.
358358
\item \emsl{These are the rules for ID change:}
359359
\begin{itemize}
360-
\item an ordinary user cannot change its RUID or saved UID (the \texttt{exec} is
361-
an exception to that, see page \pageref{EXEC})
360+
\item an ordinary user process cannot change its RUID or saved UID (the
361+
\texttt{exec} is an exception to that, see page \pageref{EXEC})
362362
\item the process can always change its EUID to that of the RUID or saved UID.
363363
This guarantees that in a SUID program, it is possible to arbitrarily change the EUID
364364
between the one that enabled the process to gain ownership rights and the
@@ -370,7 +370,7 @@
370370
\end{itemize}
371371

372372
%%%%%
373-
373+
374374
ifdef([[[NOSPELLCHECK]]], [[[
375375
\pdfbookmark[1]{getuid, getgid, geteuid, getegid, getgroups}{getuid}
376376
]]])

0 commit comments

Comments
 (0)