How to solve the problem of su command cannot set groups: Operation not permitted
This article will explain in detail how to solve the problem of su command cannot set groups: Operation not permitted. The editor thinks it is very practical, so I share it with you for reference. I hope you can get something after reading this article.
Problem scenario:
User_00@hadoop-10-125224102: > su rootPassword: su: cannot set groups: Operation not permitted1. Observe:
(1) View / bin/su
User_00@hadoop-10-125,224,102: > ll / bin/su-rwxr-xr-x 1 user_00 users 37880 May 3 2007 / bin/su
(2) compare the / bin/su files in the springboard machine that can use su command normally.
User_00@Tencent64:~ > ll / bin/su-rwsr-xr-x 1 root root 37880 Jul 14 2014 / bin/su2. Compare the differences: 3. Analysis:
-s in rwsr-xr-x represents setuid, which allows the file to be executed with the permissions of the owner of the file, rather than the permissions of the user who executed the command.
/ bin changing files that originally belong to the root group to another group caused an error, (ps: stupid error, please don't do this)
4. Resolve:
Change the file owner:
Hadoop-10-125,224,102 root:root ~ # chown-R root:root / bin/su = >-rwxr-xr-x 1 root root 37880 May 3 2007 / bin/su
Set file properties
Hadoop-10-125,224-102 rwsr-xr-x 1 root root 37880 May 3 2007 / bin/su5. Knowledge points of brain supplement:
Permission status:-rwsr-xr-x, which is now called Set UID, or SUID for short. So the role of the particularity of this special authority
SUID permissions are valid only for binary programs (binary program)
The executor needs to have executable permission of x for the program
This permission is valid only during the execution of the program (run-time)
The executor will have the permissions of the program owner (owner).
This is the end of this article on "how to solve the problem of su command cannot set groups: Operation not permitted". I hope the above content can be of some help to you, so that you can learn more knowledge. if you think the article is good, please share it for more people to see.
