我可以在没有sudo的情况下运行包含setuid（）的C程序吗？

Question

I am trying to execute a C program from multiple users and trying to login as other user within the program to access a file. But I am getting error

setuid: Operation not permitted

Can I do something such I needn't to use sudo every time? Like, giving full access to the program to use setuid as it wants without calling sudo everytime?

Answer 1

Depending on the system, and your privileges in it, you might be able to change the owner or group of the program to one that has privileges to setuid, and then set the setuid or setgid mode on the executable via chmod :

chgrp wheel my-awesome-program
chmod g+s my-awesome-program

or

chown superduperuser my-awesome-program
chmod u+s my-awesome-program

Please be aware that by doing so, you create a potential security hole. If someone can overwrite your program, they could use it to gain privileges. Do this with caution.

Answer 2

你只需要使用chmod在程序的可执行文件上使用setuid ：

sudo chmod u+s executable