--- name: "suid.conf" section: "5" platform: "linux" package: "suidmanager" version: "0.43.2" release: "Debian 2.2 (Potato)" platforms: ["linux"] url: "https://new.carta.tech/suid.conf" --- # suid.conf(5) Configuration file for files and directories with special permissions ## NAME suid.conf - Configuration file for files and directories with special permissions ## DESCRIPTION *suid.conf* contains lines describing the permissions for files and directories on your system and information about who (user or a package) is responsible for making this file or directory so special. *suid.conf* contains lines of the form: `whodoneit file user group mode` `whodoneit directory user group mode` Where "whodoneit" is either the package name responsible for installing the settings or "user" for a user override. Lines beginning with # are comments and empty lines are ignored. Example line: `sendmail /usr/bin/sendmail root mail 2755` Example override: `user /usr/bin/sendmail root root 4755` If a package has been prepared for suidmanager then that package will generate lines in */etc/suid.conf* on installation. The administrator can then change those permissions and the permissions will be kept intact across upgrades. You can change permission with the **suidregister** command. Please do not specify a package name with -s if you do local customization. **suidregister** will recognize a user override and mark your changes specially marked with "user" and insure that those changes are kept across updates of the package. If the "whodoneit" field is a package name then that package has absolute authority over the binary and can change permissions at will. If you change the *suid.conf* file by hand and do not set the "whodoneit" field to user then those permissions will be reset on the next upgrade! If a package installs setgid/setuid binaries and does not implement suidmanager then you have to run **suidregister** after each upgrade to reset the permissions after the package has overwritten the binaries with your permissions. Note that **suidregister** is run every day if you are running cron. ## SEE ALSO [*suidregister*(8)](/suidregister/8.md), [*suidunregister*(8)](/suidunregister/8.md) ## AUTHOR Originally written by Christoph Lameter \. Now maintained by Adam Klein \.