On Tue, Jun 06, 2017 at 05:21:16PM +0200, Tilman Schmidt wrote: > What does "ls -l /bin/mount" say? > Is its owner the user with UID 5013, by any chance? Yes, sounds like executed by root, but suid to non-root. Karel -- Karel Zak <kzak@xxxxxxxxxx> http://karelzak.blogspot.com -- To unsubscribe from this list: send the line "unsubscribe util-linux" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html