Compare an executable identity marker Use the same owner-execute position in both example rows. Effective identity is the identity used in many permission decisions. SUID can change that identity on eligible execution, but metadata alone cannot show unsafe program behavior or establish an exploitable flaw. No program is supplied or executed. Normal example: -rwxr-xr-x root root helper-normal SUID example: -rwsr-xr-x root root helper-special Owner triplet is positions 2-4 after the file-type character. lowercase s: set-user-ID bit plus owner execute bit in this listing. uppercase S: set-user-ID without that owner execute bit. Linux execution restrictions can suppress identity transitions. Question regular executable mode: -rwsr-x--- analyst learners tool Which owner-execute-position marker indicates SUID: s or x?