파일 시스템 액세스 이외의 권한

Question

유효한 ID는 여러 가지 방법으로 사용됩니다.

신호는 다음에 설명된 대로 전송됩니다.죽이다(2):

   For  a process to have permission to send a signal, it must either
   be privileged (under Linux: have the CAP_KILL  capability  in  the
   user  namespace  of  the target process), or the real or effective
   user ID of the sending process must equal the real or  saved  set-
   user-ID  of  the  target process.  In the case of SIGCONT, it suf‐
   fices when the sending and receiving processes belong to the  same
   session.

(예를 들어)에 설명된 대로 System V IPC 객체를 생성할 때메시지 제어(2):

   If a new message queue is created, then its associated data struc‐
   ture msqid_ds (see msgctl(2)) is initialized as follows:

          msg_perm.cuid  and  msg_perm.uid  are  set to the effective
          user ID of the calling process.

          msg_perm.cgid and msg_perm.gid are  set  to  the  effective
          group ID of the calling process.

다음에 설명된 대로 프로세스에 대한 nice 값을 설정할 때우선순위 설정(2):

   EPERM  A  process  was  located, but its effective user ID did not
          match either the effective or the real user ID of the call‐
          er,  and  was  not  privileged  (on Linux: did not have the
          CAP_SYS_NICE capability).  But see NOTES below.

마찬가지로 CPU 선호도를 설정할 때sched_setaffinity(2):

   EPERM  (sched_setaffinity()) The  calling  thread  does  not  have
          appropriate privileges.  The caller needs an effective user
          ID equal to the real user ID or effective user  ID  of  the
          thread   identified   by   pid,  or  it  must  possess  the
          CAP_SYS_NICE capability in the user namespace of the thread
          pid.

다른 예로는 다음 시스템 호출이 있습니다.제한사항(2)그리고버튼 컨트롤(2).

Answer 1