You should have as few suid programs as possible.
您要尽量少地使用suid程序。
The passwd command is one of the few that must be suid.
passwd命令是少数必须 为suid的命令之一。
Next, we can try to run the program (again without the suid bit) under strace.
接下来，我们可以试着在 strace 之下运行这个程序（同样不设置 suid 位）。
This indicates that, for this particular program, the suid and executable bits are set.
这就表示，对这个特定的程序来说，suid和可执行位已经被设置。
The suid and sgid bits occupy the same space as the x bits for user and group in a long directory listing.
suid和sgid 位与长目录清单中用户和组的x占据相同的空间。
The Linux permissions model has two special access modes called suid (set user id) and sgid (set group id).
Linux权限模型有两个特殊的访问模式，名为suid(设置用户id)和sgid(设置组id)。
For each suid/sgid file, it also reports whether the file is on a filesystem that contains world writable directories.
对于每个suid/sgid文件来说，它还报告这个文件是否在一个包含人人可写目录的文件系统中。
If the file is executable, the suid or sgid bits, if set, will be displayed as lowercase s, otherwise they are displayed as uppercase s.
如果文件是可执行的，suid或sgid位如果已设置，将会显示为小写的s，否则就显示为大写的s。
This requirement is in place to prevent users from creating suid executables that another user or administrator might inadvertently execute.
之所以有这种要求是为了防止创建其他用户或管理员可能会不经意执行的suid 可执行程序。
While suid and sgid are handy, and even necessary in many circumstances, improper use of these access mode can allow breaches of a system's security.
虽然suid和sgid很便利，甚至在很多环境下是必需的，但是这些访问模式不适当的使用会造成系统安全上的漏洞。
The suid and sgid bits are set and reset symbolically using the letter s; for example, u+s sets the suid access mode, and g-s removes the sgid mode.
suid和sgid位使用字母s 在符号上进行设置和重设；例如，u+s设置 suid访问模式，g-s删除 sgid 模式。
When an executable program has the suid access modes set, it will run as if it had been started by the file's owner, rather than by the user who really started it.
当可执行的程序设置为suid访问模式，它就会开始运行，好像是由文件所有者启动而不是由真正启动它的用户启动。
SUID and SGID permissions can give all users access to specific files.
SUID和SGID许可能给所有的使用者对特定的文件存取。
Historian Lawrence Suid has said that the film's action bears little more than a "remote resemblance" to the real event.
历史学家劳伦斯·苏德说过这部电影的情节与真实事件相差甚远。
All the set user ID (SUID) bit commands and programs shipped in AIX V7.1 have this feature enabled automatically, and no further configurations are required from an end user.
在AIXV7.1中，所有设置用户ID (SUID)位命令和程序都自动地启用此特性，不需要最终用户进一步配置。
All the set user ID (SUID) bit commands and programs shipped in AIX V7.1 have this feature enabled automatically, and no further configurations are required from an end user.
在AIXV7.1中，所有设置用户ID (SUID)位命令和程序都自动地启用此特性，不需要最终用户进一步配置。
应用推荐