I don't understand this situation:
ctf@babysuid_instance_7:/$ ls -alh /bin/bash
-rwsr-xr-x 1 root root 1.1M Jun 6 2019 /bin/bash
ctf@babysuid_instance_7:/$ /bin/bash -c 'id'
uid=1000(ctf) gid=1000(ctf) groups=1000(ctf)
Shouldn't `bash` be running with EUID 0?
Another question I have pertains to subshells.
If I set `/bin/less` to have SUID. And the read some large file with it (e.g. /etc/passwd) I can activate a shell using the command `:!sh`. This shell, however, is not running as root as I would expect. It is UID 1000(ctf). My hypothesis here is that `less` is starting a subshell and this subshell does not carry over the EUID. Is this the case?