用 LD_PRELOAD 覆盖 getuid 不能直接工作，但在 gdb 中工作

Question

I was solving a challenge from nebula exploit exercise( https://exploit-exercises.lains.space/nebula/level13/ ). Since the compiled binary is dynamically linked, I thought of writing my custom getuid() to return 1000 and set LD_PRELOAD=custom_getuid. This does not seem to work when I directly execute the binary, but I'm able to bypass the check by executing in gdb, ltrace,strace. gdb is able to load my custom getuid. Can anyone explain this behaviour please? Thanks!

find the output of two approaches here

Answer 1

I found the issue, LD_PRELOAD does not affect suid binaries. So my binary has suid set to flag13 user.