JP 5.1.1
Rel 35.3.1
ls -l sudo
-rwsr-xr-x 1 root root 157632 Apr 4 2023 sudo
this will cause setbit issue right ?
i have tried extracting the default rootfs for this same L4T release
using command sudo tar xpf Tegra_Linux_Sample-Root-Filesystem_R35.3.1_aarch64.tbz2 -C Linux_for_tegra/rootfs
i tried it 2 times but causing same issue
how to resolve
what is its root cause??
I don’t know what you are talking about.
This is directly taken from the Ubuntu sample rootfs and should not hit any permission issue.
the permission for sudo is changed
the firmware wont run any sudo commands
the permission should be drwxr-xr-x
So what’s the issue?
You get the same permission on an x86 PC:
davey@dave-yu-nvidia-pc:/usr/bin$ ls -l sudo
-rwsr-xr-x 1 root root 166056 4月 4 2023 sudo
MY host PC is ubuntu 20
I still have no idea what you are talking about.
How you hit this?
NO. It should not.
I’m 100% sure it’s -rwsr-xr-x across all machines.
The non-suid version is guaranteed to fail and is not valid. Security constraints imply you will lose all admin access. This is correct:
-rwsr-xr-x 1 root root 157632 Apr 4 2023 sudo
That’s how sudo works.
Will this work for commands with sudo?
sudo is its own very specialized and restricted system. The suid bit (sorry, not sticky bit) in combination with the sudoers config determines what any particular user can use sudo for.
An interesting case study: If you use the NTFS or VFAT filesystem type, then there is no such thing as an suid bit. Using NTFS or VFAT guarantees you would disable Linux on that filesystem type (at least for admin access).
Im not getting what you are comming to say?
What will be ls -l sudo in cd /usr/bin/
You seem to have wanted to remove the suid bit from the file permissions. That bit is mandatory. You want this:
ls -l sudo
-rwsr-xr-x 1 root root 157632 Apr 4 2023 sudo
Changing to any permission other than this guarantees you need to reflash the system to make it work. Are you trying to disable the system?
This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.