File permission "s"

Checking file permissions, I notice

Code:

-rw[color=darkred]s[/color]r-xr-x 1 root root

on the executable chrome-sandbox. From what I briefly researched, it seems to imply giving the user temporary root permissions? Is this true and if so, why is it necessary?

 

See this link for a simple explanation: http://content.hccfl.edu/pollock/aunix1/filepermissions.htm

Therefore the "s" showing indicates that root has executable and SUID rights. The link also explains what SUID is if you don't know.

 

But no, the thing you're showing is owned by root. The normal user couldn't use it unless they elevated their privileges.

 

Group and Other can still execute, though. I just wonder what is special about the "s" permission that User has. Thanks!

 

It's necessary because the Chrome-sandbox has to have root to actually go into sandbox mode. Once it chroots it then drops those privileges. Info here: https://code.google.com/p/setuid-sandbox/

 

Excellent, thanks chronomatic