O que faz \ (-perm -4000 -o -perm -2000 \)?

1

Gostaria de saber o que o \( -perm -4000 -o -perm -2000 \) faz. Eu acho que é níveis de permissão, mas eu tenho dificuldade em encontrar o comando -perm em qualquer documentação.

Em contexto completo usado em sudo find / -type f \( -perm -4000 -o -perm -2000 \) -print

    
por Olof 06.10.2014 / 20:30

3 respostas

1

man find é bem claro:

   -perm mode

       File's permission bits are exactly  mode  (octal  or  symbolic).
          Since  an  exact match is required, if you want to use this form
          for symbolic modes, you may have to  specify  a  rather  complex
          mode  string.  For example -perm g=w will only match files which
          have mode 0020 (that is, ones for which group  write  permission
          is  the  only  permission set).  It is more likely that you will
          want to use the '/' or '-' forms, for example -perm -g=w,  which
          matches  any file with group write permission.  See the EXAMPLES
          section for some illustrative examples.

   -perm -mode

          All of the permission bits mode are set for the file.   Symbolic
          modes  are accepted in this form, and this is usually the way in
          which would want to use them.  You must specify 'u', 'g' or  'o'
          if  you use a symbolic mode.   See the EXAMPLES section for some
          illustrative examples.

   -perm /mode

          Any of the permission bits mode are set for the file.   Symbolic
          modes  are  accepted in this form.  You must specify 'u', 'g' or
          'o' if you use a symbolic mode.  See the  EXAMPLES  section  for
          some  illustrative  examples.  If no permission bits in mode are
          set, this test matches any file (the idea here is to be  consis‐
          tent with the behaviour of -perm -000).

   -perm +mode

          Deprecated,  old way of searching for files with any of the per‐
          mission bits in mode set.  You should use -perm  /mode  instead.
          Trying to use the '+' syntax with symbolic modes will yield sur‐
          prising results.  For example, '+u+x' is a valid  symbolic  mode
          (equivalent to +u,+x, i.e. 0111) and will therefore not be eval‐
          uated as -perm +mode but instead as  the  exact  mode  specifier
          -perm  mode  and so it matches files with exact permissions 0111
          instead of files with any execute bit set.  If  you  found  this
          paragraph  confusing,  you're  not alone - just use -perm /mode.
          This form of the -perm test  is  deprecated  because  the  POSIX
          specification  requires  the  interpretation of a leading '+' as
          being part of a symbolic mode, and so we switched to  using  '/'
          instead.
    
por Rinzwind 06.10.2014 / 20:37
1

Isto parece tentar encontrar o arquivo sid (2000: set groupid) suid (4000: set userid).

isto é binário que, quando executado, obtém um novo userid ou um novo groupid. esses são usados principalmente para

  • tarefa relacionada ao sistema
  • banco de dados (por exemplo, arquivo pertence a oracle ou mysql)
  • sistema de hackers ...
por Archemar 06.10.2014 / 20:40
0

Este comando lista os arquivos que possuem o conjunto de bits SETUID ou SETGID:

# find / -type f \( -perm -4000 -o -perm -2000 \) -print
/sbin/unix_chkpwd
/bin/su
...
# stat /bin/su
Access: (4755/-rwsr-xr-x)  Uid: (    0/    root)   Gid: (    0/    root)
...
# stat /sbin/pam_extrausers_chkpwd
Access: (2755/-rwxr-sr-x)  Uid: (    0/    root)   Gid: (   42/  shadow)
...

Relacionados:

por muru 06.10.2014 / 20:40