{"id":1313,"date":"2022-11-25T00:48:58","date_gmt":"2022-11-25T00:48:58","guid":{"rendered":"https:\/\/blog.thepragmatic.xyz\/?p=1313"},"modified":"2022-11-25T02:28:23","modified_gmt":"2022-11-25T02:28:23","slug":"permisos-especiales-en-linux","status":"publish","type":"post","link":"https:\/\/blog.thepragmatic.xyz\/?p=1313","title":{"rendered":"Permisos especiales en Linux (Sticky Bit, SUID y SGID)"},"content":{"rendered":"\n<p><\/p>\n\n\n\n<p>Revisar intermediate Linux drive<\/p>\n\n\n\n<p><a href=\"https:\/\/www.carreralinux.com.ar\/cla\/pdf\/administrador\/ApunteAdministrador02.pdf\">https:\/\/www.carreralinux.com.ar\/cla\/pdf\/administrador\/ApunteAdministrador02.pdf<\/a><\/p>\n\n\n\n<p>tambien hay ACLs<\/p>\n\n\n\n<h2>\u00bfC\u00f3mo funcionan estos permisos?<\/h2>\n\n\n\n<p><a href=\"https:\/\/www.luisguillen.com\/posts\/2017\/12\/como-funcionan-permisos-suid\/\">https:\/\/www.luisguillen.com\/posts\/2017\/12\/como-funcionan-permisos-suid\/<\/a><\/p>\n\n\n\n<p><\/p>\n\n\n\n<h2>Sticky  bit (Bit de permanencia)<\/h2>\n\n\n\n<p><\/p>\n\n\n\n<p>El sticky bit com\u00fanmente es utilizado para \u00ab\/tmp\u00bb<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>chmod 1775 test\nchmod +t \/test #para activar sticky bit\nchmod -t \/test #para desactivar sticky bit\n\nhttps:&#47;&#47;www.ochobitshacenunbyte.com\/2019\/06\/17\/permisos-especiales-en-linux-sticky-bit-suid-y-sgid\/<\/code><\/pre>\n\n\n\n<p><\/p>\n\n\n\n<h2>SUID<\/h2>\n\n\n\n<p><\/p>\n\n\n\n<p>significa que el que lo ejecute va a tener los mismos permisos que el que cre\u00f3 el archivo. En otras palabras todo aquel usuario que lo ejecute va a disponer, hasta que el programa finalice, de un nivel de privilegio total en el sistema. [1]<\/p>\n\n\n\n<p>Esto es \u00fatil en algunas ocasiones, aunque hay que utilizarlo con cuidado, ya que puede acarrear problemas de seguridad<\/p>\n\n\n\n<p><\/p>\n\n\n\n<h2>SGID<\/h2>\n\n\n\n<pre class=\"wp-block-code\"><code>chmod g+s \"directorio\"\nchmod 2555 \"fichero\"<\/code><\/pre>\n\n\n\n<p><\/p>\n\n\n\n<p><\/p>\n\n\n\n<h2>Busqueda de archivos con permisos elevados<\/h2>\n\n\n\n<pre class=\"wp-block-code\"><code>find \/usr\/bin -type f -perm -u+s\nfind \/usr\/bin -type f -perm -g+s<\/code><\/pre>\n\n\n\n<h2>En Docker<\/h2>\n\n\n\n<p><\/p>\n\n\n\n<p><a href=\"https:\/\/tomcope.com\/tutorial\/2020\/02\/20\/docker-setuid-setguid.html\">https:\/\/tomcope.com\/tutorial\/2020\/02\/20\/docker-setuid-setguid.html<\/a><\/p>\n\n\n\n<p>chmod 4555<\/p>\n\n\n\n<p><\/p>\n\n\n\n<p><\/p>\n\n\n\n<p><\/p>\n\n\n\n<p><\/p>\n\n\n\n<h2>UID y GID en Docker<\/h2>\n\n\n\n<figure class=\"wp-block-embed is-type-video is-provider-youtube wp-block-embed-youtube wp-embed-aspect-16-9 wp-has-aspect-ratio\"><div class=\"wp-block-embed__wrapper\">\n<iframe loading=\"lazy\" title=\"Esto no me lo imaginaba - UID y GIDs en Docker\" width=\"640\" height=\"360\" src=\"https:\/\/www.youtube.com\/embed\/0xUwaz0MD_E?start=1&#038;feature=oembed\" frameborder=\"0\" allow=\"accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share\" allowfullscreen><\/iframe>\n<\/div><\/figure>\n\n\n\n<p><\/p>\n\n\n\n<p>Docker capabilities SETGID SETUID<\/p>\n\n\n\n<p>https:\/\/www.youtube.com\/watch?v=0xUwaz0MD_E&amp;t=1s Pelado nerd<\/p>\n\n\n\n<p><a href=\"https:\/\/dockerlabs.collabnix.com\/advanced\/security\/capabilities\/\">https:\/\/dockerlabs.collabnix.com\/advanced\/security\/capabilities\/<\/a><\/p>\n\n\n\n<p><a href=\"https:\/\/tomcope.com\/tutorial\/2020\/02\/20\/docker-setuid-setguid.html\">https:\/\/tomcope.com\/tutorial\/2020\/02\/20\/docker-setuid-setguid.html<\/a>.   remela!!!<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>$sudo docker run --rm -it --cap-drop $CAP alpine sh\n$sudo capsh<\/code><\/pre>\n\n\n\n<p>setcap<\/p>\n\n\n\n<p><\/p>\n\n\n\n<h2>ACLs: Listas de control de acceso<\/h2>\n\n\n\n<p>getfacl<\/p>\n\n\n\n<p>revisar practica control de acceso josaq<\/p>\n\n\n\n<p><\/p>\n\n\n\n<p>Mas referencias<\/p>\n\n\n\n<p><\/p>\n\n\n\n<p><a href=\"https:\/\/www.ibiblio.org\/pub\/linux\/docs\/LuCaS\/Manuales-LuCAS\/doc-unixsec\/unixsec-html\/node56.html\">https:\/\/www.ibiblio.org\/pub\/linux\/docs\/LuCaS\/Manuales-LuCAS\/doc-unixsec\/unixsec-html\/node56.html<\/a>[1]<\/p>\n\n\n\n<p><a href=\"https:\/\/www.luisguillen.com\/posts\/2017\/12\/como-funcionan-permisos-suid\/\">https:\/\/www.luisguillen.com\/posts\/2017\/12\/como-funcionan-permisos-suid\/<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Revisar intermediate Linux drive https:\/\/www.carreralinux.com.ar\/cla\/pdf\/administrador\/ApunteAdministrador02.pdf tambien hay ACLs \u00bfC\u00f3mo funcionan estos permisos? https:\/\/www.luisguillen.com\/posts\/2017\/12\/como-funcionan-permisos-suid\/ Sticky bit (Bit de permanencia) El sticky bit [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[1],"tags":[],"_links":{"self":[{"href":"https:\/\/blog.thepragmatic.xyz\/index.php?rest_route=\/wp\/v2\/posts\/1313"}],"collection":[{"href":"https:\/\/blog.thepragmatic.xyz\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.thepragmatic.xyz\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.thepragmatic.xyz\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.thepragmatic.xyz\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1313"}],"version-history":[{"count":20,"href":"https:\/\/blog.thepragmatic.xyz\/index.php?rest_route=\/wp\/v2\/posts\/1313\/revisions"}],"predecessor-version":[{"id":1325,"href":"https:\/\/blog.thepragmatic.xyz\/index.php?rest_route=\/wp\/v2\/posts\/1313\/revisions\/1325"}],"wp:attachment":[{"href":"https:\/\/blog.thepragmatic.xyz\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1313"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.thepragmatic.xyz\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1313"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.thepragmatic.xyz\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1313"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}