The file effective set will be full on if the process's effective uid is root or the file is setuid root.
如果进程的有效uid是根用户，或者文件是setuid root，那么文件有效集就是满的。
This set of rules allows a process to have capabilities either by virtue of being root or by running a setuid root file.
这套规则让进程可以根据根用户或者通过运行setuid root文件拥有能力。
The file inheritable and permitted sets will be full on if the process's real or effective uid is 0 (root) or the file is setuid root.
如果进程的真实uid或有效uid是0(根用户)，或者文件是setuid root，那么文件的可继承集和允许集就是满的。
Nevertheless, file capabilities applied judiciously to system binaries in place of making them setuid root can help protect your systems.
无论如何，对系统二进制代码谨慎地应用文件能力，用这种方式替代setuid root方式，可以更好地保护系统。
But a significant contributing factor is that Sendmail is often installed as a monolithic "setuid root" program, with complete control over the system it runs on.
不过，一个重要的作用因素是，Sendmail经常被安装为一个单一的“setuid root”程序，对运行它的系统有完全的控制权限。
For example, a program that needs a single root privilege may get started as root (say, by being setuid root) and then switch to running as a less-privileged user.
例如，需要个别的root特权的程序可能以root身份启动(比如说，通过成为setuid root)然后切换到以较少特权用户身份运行。
The UNIX passwd command is an example; it's a command-line tool with special privileges to change the password (setuid root), but the only thing it can do is change passwords.
UNIX的passwd命令就是一个例子；它是一个具有特定特权的命令行工具，用于修改密码(setuid root)，但是它所能做的只是修改密码。
The UNIX passwd command is an example; it's a command-line tool with special privileges to change the password (setuid root), but the only thing it can do is change passwords.
UNIX的passwd命令就是一个例子；它是一个具有特定特权的命令行工具，用于修改密码(setuid root)，但是它所能做的只是修改密码。
应用推荐