NAME
suid.conf - Configuration file for files and directories with special permissions
DESCRIPTION
suid.conf contains lines describing the permissions for files and directories on your system and information about who (user or a package) is responsible for making this file or directory so special.
suid.conf contains lines of the form:
whodoneit file user group mode
whodoneit directory user group mode
Where "whodoneit" is either the package name responsible for installing the settings or "user" for a user override. Lines beginning with # are comments and empty lines are ignored.
Example line:
sendmail /usr/bin/sendmail root mail 2755
Example override:
user /usr/bin/sendmail root root 4755
If a package has been prepared for suidmanager then that package will generate lines in /etc/suid.conf on installation. The administrator can then change those permissions and the permissions will be kept intact across upgrades. You can change permission with the suidregister command. Please do not specify a package name with -s if you do local customization. suidregister will recognize a user override and mark your changes specially marked with "user" and insure that those changes are kept across updates of the package. If the "whodoneit" field is a package name then that package has absolute authority over the binary and can change permissions at will. If you change the suid.conf file by hand and do not set the "whodoneit" field to user then those permissions will be reset on the next upgrade!
If a package installs setgid/setuid binaries and does not implement suidmanager then you have to run suidregister after each upgrade to reset the permissions after the package has overwritten the binaries with your permissions. Note that suidregister is run every day if you are running cron.
SEE ALSO
AUTHOR
Originally written by Christoph Lameter <[email protected]>. Now maintained by Adam Klein <[email protected]>.