Quick answer
Beyond SUID/SGID, LinPEAS reports writable files and directories, files with ACLs, ld.so misconfigurations, writable init/service files, and — a high-value check — writable root-owned executables you can modify.
Where it appears#
These checks are in the Files with Interesting Permissions section (interesting_perms_files), with more file findings in Other Interesting Files (interesting_files).
╔══════════╣ Writable root-owned executables I can modify
/usr/local/bin/maintenance (owner root, writable by you)
╔══════════╣ Files with ACLs
/etc/some.conf user:you:rw-How to read it#
- A writable root-owned executable that root later runs is a direct path.
- ACLs can grant you access that standard permissions hide — check them explicitly.
- ld.so misconfigurations (writable config or library paths) can hijack privileged programs.
Verify it yourself#
find / -xdev -type f -perm -0002 ! -type l 2>/dev/null # world-writable files
getfacl -R /etc 2>/dev/null | grep -B2 $(whoami) # ACLs granting you access
cat /etc/ld.so.conf.d/*.confSources & references
- linPEAS README
- PEASS-ng release — reviewed 20260908-dffb9496
- HackTricks: Linux privilege escalation