Being a member of the group system:administrators allows a user to create setuid or setgid binaries in a cell. Because of the security implications of running setuid binaries out of a networked filesystem, whether to "trust" a given cell for setuid binaries is configurable on a per workstation basis. The fs getcell command is used to determine the status of a cell.
The status of a cell can be changed with the fs setcell command.
| previous | index | next |