`ls -l /usr/bin/passwd` shows `-rwsr-xr-x 1 root root`. What does the s in the owner's execute position mean?
LPIC-1 Exam 101-500, objective 104. Devices, Linux filesystems, filesystem hierarchy standard medium
Machine-checked — no person has signed for it. This question was read against the source cited below by an automated pass, which found no contradiction. That is a weaker claim than it sounds: the same kind of process wrote the question, so it can confirm its own mistake.
Treat it as a good draft rather than as settled fact, and read the source below before you rely on it. It is not used in mock exams here — only questions a person has signed for are.
How these questions are written — where each question comes from, what the verification ledger records, and what happens when one is found wrong.
The options
Not correct The file is shared, so the kernel keeps a single copy of its text segment in memory.
Wrong. That was the original meaning of the sticky bit on executables in old Unix, and Linux ignores it on regular files. It has nothing to do with s.
Not correct The program runs with the effective group ID of the file's group.
Wrong. That is SGID, and it appears as an s in the group execute position (-rwxr-sr-x), not the owner's.
Not correct Only root may delete or rename the file.
Wrong. That is roughly what the sticky bit does, and only for files inside a directory that carries it; it appears as t in the other-execute position.
Correct The program runs with the effective user ID of the file's owner, root, whoever starts it.
Correct. That is the SUID bit. passwd needs it because it must write /etc/shadow, which ordinary users cannot open at all.
Why
Special bits in ls output: s in the owner-execute slot is SUID (octal 4000), s in the group-execute slot is SGID (2000), t in the other-execute slot is the sticky bit (1000). A capital S or T means the bit is set while the underlying execute bit is not. Set them with chmod u+s, g+s, +t, or with a fourth leading octal digit such as 4755.
Where this comes from
- Cited
- LPI exam objective 104.5
- What it says
- Understand and apply the suid, sgid and sticky bits.
Practise this
Reading one question is not practice. The trainer will draw a short set from objective 104 and space the ones you get wrong.
More questions on this objective
- A new disk /dev/sdb has no partition table at all. Which command writes an empty GPT partition table onto it without dropping you into an interactive editor? machine-checked
- You need the partition /dev/sdc1 on a USB stick to carry a FAT32 filesystem so that Windows machines can read and write it. Which command creates it? machine-checked
- You have just run `mkswap /dev/sdb2`. Which command makes the kernel start using that swap area immediately, without a reboot? machine-checked
- Why is it dangerous to run e2fsck against an ext4 filesystem that is currently mounted read-write? machine-checked
- On an ext4 filesystem at /dev/sda1 you want an automatic check to be forced after every 30 mounts. Which command sets that? machine-checked
- `df -h /var` reports the filesystem 100% full, but `du -sh /var` accounts for only about half that space. Nothing is hidden under a mount point. What is the most likely explanation? machine-checked
All questions on Devices, Linux filesystems, filesystem hierarchy standard